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ACCAT  GUARD  technology  during  IOC  and  to  assess  potential  enhancements  to 
this  system,  it  is  desirable  to  evaLuate  these  concepts  in  an  operational 
exercise. 

The  primary  purpose  of  the  FORSCOM  GUARD  experiment  is  to  provide  an  IOC 
test  bed  for  GUARD  to  test  the  effectiveness  of  GUARD  as  a  major  security 
application  in  an  operational  environment.  The  major  operational  exercise 
will  be  PROUD  SPIRIT.  Although  the  tes^  will  be  conducted  in  a  benign 
system-high  environment,  the  experiment  will  be  structured  to  simulate 
the  "potentially  threatening"  environment  of  allowing  the  availability  to 
non-Top  Secret  WES  sites. 

\ 

Presently,  the  MLS  ACCAT  GUARD  system  has  completed  its  GENSER  phase  tes¬ 
ting.  Based  on  the  GENSER  test  phase  the  following  new  GUARD 
requirements  have  been  identified: 

a.  An  "automatic"  downgrade  mechanism  for  reducing  the  workload 
of  the  Security  Watch  Officer  CSWO). 

b.  A  special  "low-to-high"  filtering  mechanism  for  limiting  low 
user  capabilities  on  the  system. 

The  first  new  requirement  allows  the  GUARD,  in  a  trusted  manner,  to  per¬ 
form  automatic  downgrade  operations  for  certain  recognizable  high  side 
outputs.  Presently  with  ACCAT  GUARD  all  high-to-low  data  must  be 
screened  by  the  SWO.  This  new  feature  will  reduce  the  workload  of  the 
SWO  and  also  improve  the  overall  responsiveness  of  the  system. 


SECTION  1 


SCOPE 


1.1  IDENTIFICATION 

>This  document  sets  forth  design  and  implementation  requirements  for  the 
Initial  Operational  Capability  (IOC)  phase  of  the  GUARD  project.  The  IOC 
phase  of  GUARD  will  operate  under  the  UNIX  Operating  System,  which  shall 
ultimately  consist  of  the  Kerne lized  Secure  Operating  System  (KSOS)  secu~ 
rity  kernel  and  the  UNIX  emulation  package.  (  This  IOC  phase  of  GUARD 
software  will  operate  under  a  version  of  Wtjitern  Electric  UNIX  (Baseline 
6.0)  enhanced  to  provide  both  a  more  kSOS-like  environment  and  operate 
with  the  special  IOC  testbed  interfaces. 

1.2  FUNCTIONAL  SUMMARY 

The  FORSCON  WWMCCS  environment  has  been  chosen  for  the  GUARD  IOC  test 
site.  This  environment  is  ideal  for  experimenting  further  with  the  GUARD 
technology.  It  is  desired  to  experiment  with  the  GUARD  technology  at 
FORSCON  in  order  to  determine  whether  FORSCON  could  connect  its  present 
and  future  WES  sites  without  jeopardizing  security  thus  eliminating  the 
efforts  and  associated  costs  of  upgrading  these  sites  to  Top  Secret,  the 
system  high  operation.  Therefore,  to  determine  the  true  value  of  the 
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The  second  requirement  is  for  security  considerations.  The  purpose  of 
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the  filtering  mechanism  is  to  confine  the  low  user's  activity  on  the  high 
side  of  GUARD.  It  is  believed  that  with  the  incorporation  of  the  automa¬ 
tic  downgrade  mechanism,  it  will  be  necessary  to  restrict  the  low  user 
from  performing  certain  operations.  This  is  particularly  true  for 
GUARD'S  IOC  phase  at  FORSCOM,  where  the  user  is  provided  an  interactive 
envi ronment. 
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The  following  outcome  of  the  GUARD  IOC  experiment  will  provide  excellent 
data  as  to  the  true  effectiveness  of  a  downgrade  mechanism  for  solving 
MLS  problems  in  essentially  non-MLS  systems. 


m 


l 

t 


1 


1 2*1 


1.2.1  ACCAT  GUARD 


The  ACCAT  GUARD  system  allows  the  controlled  "writing  down"  of  informa¬ 
tion  from  a  high  security  level  network  computer  host  to  that  of  a  lower 
security  level  network  computer  host.  The  "writing  down"  operation  of 
the  system  is  controlled  completely  by  a  Security  Watch  Officer  (SUO). 
Since  the  ACCAT  GUARD  will  become  one  of  the  first  applications  to  be 
placed  under  the  Kernelized  Secure  Operating  System  (KSOS)  (currently 
under  development),  it  will  be  a  verifiably  secure  system.  In  particu¬ 
lar,  the  "writing  down"  mechanism  has  been  formally  specified  and  will  be 
implemented  using  the  Modula  programming  language,  a  language  which  lends 
itself  to  formal  code  proofs. 
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Funtionally,  the  ACCAT  GUARD  (see  Figure  1-1)  provides  a  transactional¬ 
like  interface  to  its  user  set.  ACCAT  GUARD  users  reside  on  distant 
hosts  connected  to  the  ARPANET.  One  user  set  resides  on  a  host  with  a 
high  security  level  and  the  other  user  set  resides  on  a  host  with  a  lower 
security  level.  The  users  communicate  to  each  other  and  other  hosts 
through  GUARD  using  standard  ARPANET  messages  (referred  to  in  GUARD  as 
transactions).  Three  basic  transactions  are  supported  by  the  ACCAT 
GUARD. 

a.  Messages  from  a  low/high  user  to  a  high/low  user. 

b.  Canonical  queries  from  a  low/high  user  to  a  high/low  host. 

c.  English  queries  from  a  low/high  user  to  a  high/low  host. 

Messages  are  standard  ARPANET  mail,  canonical  queries  are  queries  which 
are  in  the  proper  syntactic  form  for  direct  processing  by  the  recipient 
host,  and  English  queries  are  queries  which  must  be  manually  translated 
by  GUARD  personnel  into  canonical  queries  prior  to  submission  to  the 
recipient  host. 

Communication  security  is  guaranteed  by  the  COMSEC  approved  Private- 
Line-Interfaces  (PLI)  Connecting  the  hosts  to  the  ARPANET.  The  PLI's 
provide  encryption/decryption  of  information  flowing  from/to  the  hosts. 
The  connectivity  of  a  low  host  to  a  high  host  is  only  possible  through 
the  ACCAT  GUARD.  GUARD  has  two  PLI  connections  to  the  ARPANET,  one  com¬ 
patible  with  the  high  host  PLI  and  the  other  compatible  with  the  low  host 
PLI  (Figure  1-1). 


1.2.2  FORSCOM  Security  Monitor  (FSM)  6UARD 


The  FORSCOM  Security  Monitor  (FSM)  GUARD  (to  be  called  FSM  from  here  on) 


will  be  a  further  extension  of  the  technology  of  the  existing  ACCAT  GUARD 


and  be  based  on  the  actual  software  currently  comprising  this  system. 


The  FSM  system,  however,  requires  some  alterations  to  the  current  ACCAT 


GUARD  system.  These  are  as  follows: 


a.  The  FSM  system  will  interface  a  set  of  tow  security  level 


users  to  a  high  security  level  host  (see  Figure  1-2). 


b.  The  "communication  unit"  of  the  FSM  is  not  transaction  orien¬ 


ted,  but  instead  is  highly  interactive. 


c.  Based  on  GENSER  phase  testing,  the  FSM  requires  that  certain 


low  level  user  inputs  be  filtered  prior  to  submission  to  the 


high  level  host. 


Based  on  GENSER  phase  testing,  the  FSM  will  employ  a  special 
"recognition  mechanism"  which  will  allow  the  automatic 
screening  for  certain  system  level  prompts  to  the  low  secu¬ 


rity  level  user. 


Since  the  FSM  exercise  will  be  operating  in  a  benign  environment,  the 


standard  UNIX  version  of  the  ACCAT  GUARD  (GENSER  version)  can  be  used  as 


a  software  baseline  for  this  new  system. 
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Based  on  GENSER  phase  testing,  it  has  become  advisable  that  a  special 
automatic  screening  mechanism  be  added  to  the  current  GUARD  system. 
Although  the  initial  test  of  this  technology  will  only  simulate  the  "wri¬ 
ting  down"  of  information  from  a  high  security  level  to  a  lower  security 
level,  the  basic  architecture  and  design  of  this  mechanism  must  be  care¬ 
fully  analyzed  to  ensure  that  future  implementations  under  KSOS  can  be 
verified  to  operate  correctly. 

The  basic  operation  of  the  FSM  system  is  as  follows.  As  depicted  in 
Figure  1-2,  the  FORSCOM  WWMCCS  system,  the  FSM  and  the  Screener  are  loca¬ 
ted  in  a  Top  Secret  system  high  area.  (The  Screener  is  the  FSM  counter¬ 
part  to  the  ACCAT  GUARD'S  Security  Watch  Officer.)  The  FORSCOM  WWMCCS 
system  and  the  FSM  are  directly  connected  and  the  low  security  users  are 
connected  to  the  FSM  only.  Therefore,  the  multi-level  secure  situation 
exists  only  in  the  FSM  processor.  When  a  low  security  level  user  logs 
onto  the  FORSCOM  system,  they  are  in  reality  logging  onto  the  FSM  system 
which  in  turn  logs  the  user  onto  the  FORSCOM  system.  Note,  the  FORSCOM 
system  software  is  not  cognizant  of  the  fact  that  the  FSM  system  is 
between  it  and  the  low  security  users.  Therefore,  the  FSM  system  must 
have  complete  knowledge  of  what  the  user  is  entering  into  the  system. 
This  is  required  for  two  reasons: 

a.  In  order  for  FSM  to  properly  filter  what  the  user  is  enter¬ 
ing,  the  filtering  must  be  accomplished  within  the  context  of 
what  the  user  is  doing  in  the  FORSCOM  system. 


V 


In  order  for  FSM  to  property  recognize  certain  system  respon¬ 


ses  for  automatic  screening  sequences,  FSM  must  again  do  this 


within  the  context  of  what  the  user  is  doing  in  the  FORSCOM 


system. 


A  pre-established  set  of  FORSCOM  system  level  prompts  will  be  recognized 


by  the  FSM  system  and  sent  directly  to  the  low  security  level  user 


without  Screener  intervention.  All  variable  data  (e.g.,  teleconferencing 


messages)  must  go  through  the  standard  screening  mechanism. 
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SECTION  2 


APPLICABLE  DOCUMENTS 


Following  is  a  list  of  documents  relevant  to  this  computer  program 
development  specification. 


2.1  GOVERNMENT  DOCUMENTS 


a.  Logicon,  "ACCAT  GUARD  Computer  Program  Development  Specifica¬ 
tion  (Type  B5>",  February  1979. 


b.  Logicon,  "Formal  Specification  of  GUARD  Trusted  Software"/ 
September  1979. 


c.  Logicon,  "ACCAT  GUARD  Acceptance  Test  Plan  (ATP)",  March 
1980. 


d.  Mitre  Corporation,  "ACCAT  GUARD  System  Specification  (Type 
A)",  August  1978. 


e.  Mitre  Corporation,  "ACCAT  GUARD  Overview",  November  1979. 


f.  U.S.  Army  Forces  Command,  "WWMCCS  Entry  System  (WES)  Terminal 
User's  Handbook",  September  1978. 
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g.  IBM,  "FORSCOM  Computer  Security  Concept  Experiment  Notebook", 
April  1980. 

2.2  NON -GOVERNMENT  DOCUMENTS 


a.  Bell  Telephone  Laboratories,  "UNIX  Programmer's  Manual",  May 
1973. 


SECTION  3 


REQUIREMENTS 

The  FORSCOM  Security  Monitor  (FSM)  system  shall  provide  for  the  secure 
transfer  of  information  from  the  FORSCOM  WWMCCS  system  running  at  Top 
Secret  system  high  to  a  set  of  WWMCCS  Entry  System  (WES)  users  of  a  lower 
classification  level.  Special  facilities  provided  by  FSM  will  be  con¬ 
trolled  downgrading  of  information  from  FORSCOM  WWMCCS  to  the  WES  sites, 
both  manual  and  automatic,  low  user  command  filtering,  extensive  audit 
trail  capabilities,  and  mechanisms  to  monitor  and  alter  the  FSM  environ¬ 
ment. 

In  order  to  accomplish  the  above  FSM  functions  two  FSM  personnel  types 
must  be  provided:  the  FSM  Screener  and  the  Environment  Manager  (EM). 
The  Screener  is  responsible  for  insuring  manually  that  information  being 
downgraded  (i.e.,  "written  down")  to  low  security  level  WES  site  users 
does  not  contain  sensitive  information  of  a  higher  classification.  The 
Screeners  perform  their  function  via  a  Cathode  Ray  Tube  (CRT)  terminal 
which  interfaces  with  FSM  "trusted  software."  The  trusted  software  will 
potentially  be  formally  verified  to  guarantee  that  it  does  indeed  operate 
correctly  in  accomplishing  the  downgrade.  This  special  software  guaran¬ 
tees  that  information  is  written  down  to  the  "low  side"  of  FSM  only  if 
the  Screener  has  viewed  all  the  information  and  has  approved  and  confir- 


med  a  downgrade.  The  EH  is  responsible  for  a  variety  of  tasks;  the  reas¬ 
signing  of  low  WES  site  users  to  a  specific  Screener,  the  monitoring  of 
low  WES  site  user  activity,  the  establishment  of  special  test/exercise 
parameters  for  automatic/manual  screening,  and  the  control  of  the  PSH 
audit  trail.  The  EH  accomplishes  his  role  via  a  terminal  and  untrusted 
software  (albeit,  some  of  the  current  functionality  required  for  the 
exercise/experiment  is  potentially  security  relevant.  However,  these 
mechanisms  would  be  removed  in  an  operational  environment). 

Automatic  screening  and  low  user  filtering  will  be  accomplished  with 
trusted  software  which  interacts  in  concert  with  the  Screener  trusted 
software.  Automatic  screening  is  performed  on  those  FORSCOH  WWMCCS  sys¬ 
tem  outputs  which  are  exactly  recognized  within  the  context  of  the 
user/system  dialogue.  Those  system  outputs  which  are  not  recognizable 
(i.e.,  termed  "variable  data")  must  be  screened  manually  by  an  assigned 
Screener.  Low  WES  site  user  filtering  is  accomplished  by  the  same  set  of 
trusted  software  which  performs  automatic  screening.  For  this  situation 
the  low  user's  input  is  restricted  to  a  subset  of  the  total  FORSCOH 
WWHCCS  capability. 

The  FSH  functionality  described  above  will  be  accomplished  by  a  set  of 
computer  programs  and  data  structures.  The  remainder  of  this  section 
will  describe  these  in  detail. 


3.1  PROGRAM  IDENTIFICATION 


A  program  Is  defined  by  the  algorithms  It  requires  and  the  data  struc¬ 
tures  (i.e.,  the  program  "states")  required  by  the  algorithms.  The 
specification  and  subsequent  Implementation  of  these  algorithms  Is  by  the 
use  of  computer  programs.  These  programs  when  activated  are  called  pro¬ 
cesses.  FSM  Is  specified  and  Implemented  by  a  set  of  concurrent  processes 
which  operate  over  a  set  of  data  structures  representing  the  current 
state  of  FSM.  The  remainder  of  this  section  presents  and  specifies  In 
detail  all  FSM  programs,  data  structures,  and  their  interaction. 

3.1.1  Functional  Areas 

This  subsection  describes  the  basic  functional  areas  which  comprise  the 
software  of  the  FORSCOW  Security  Monitor  IFSM).  As  discussed  above,  FSM 
will  be  implemented  via  a  set  of  concurrent  processes  and  a  set  of  data 
structures  which  represent  the  state  of  FSM.  Some  processes  will  be 
invoked  by  user  action  (i.e.,  the  Screener,  the  EM,  or  a  low  WES  site 
user)  while  others  may  exist  at  all  times  performing  required  system 
functions.  The  data  structures  will  be  comprised  of  non-volatile  disk 
files  and  volatile  message  queues.  The  precise  specification  of  the  sta¬ 
tes  of  these  data  structures  in  relation  to  the  interaction  of  the  pro¬ 
cesses  constitutes  the  total  algorithm  of  FSM  operation.  This  section 
deals  with  the  classes  of  FSM  programs  and  descriptions  of  FSM  data 
structures.  8efore  discussing  these  in  detail  an  overview  of  information 
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programs  are  represented  as  executing  processes  (indicated  as  ellipses). 
Each  program  name  is  contained  within  the  ellipse.  The  arrowed  lines 
connecting  processes  indicate  the  direction  of  information  flow,  where  in 
some  cases  the  information  flow  is  bi-directional  (i.e.,  arrow  heads  on 
both  ends).  The  FSM  environment  is  divided  into  a  high  security  domain 
and  a  low  security  domain.  Note,  except  for  the  FSM  Guardian  Program 
(FSMGP),  all  FSM  programs  operate  in  the  high  security  domain  of  FSM. 
FSMGP  operates  in  both  domains  and  has  been  given  the  privilege  of  viola¬ 
ting,  in  a  controlled  manner,  the  *-property  of  the  DoD  security  model 
(i.e.,  FSMGP  can  write  information  to  a  lower  security  level).  Conse¬ 
quently,  FSMGP  must  be  trusted  software.  FSM  personnel  are  depicted  at 
the  top  of  Figure  3-1  and  interface  through  the  high  security  domain  of 
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For  this  scenario  let's  assume  that  one  or  more  Screeners  are  currently 
logged  on  to  the  FSM  system.  Now  a  low  WES  site  user  wishes  to  access 
the  FORSCOM  WWMCCS  system.  The  WES  user  logs  onto  the  FSM  via  his  ter¬ 


minal.  The  FSMGP  is  responsible  for  interfacing  with  the  user  (i.e., 
there  will  be  a  separate  copy  of  FSMGP  for  each  user  interfacing  to  FSM). 
FSMGP  requests  a  Screener  assignment  from  the  FSM  Assignment  Daemon 
(FASSd)  and  allows  the  WES  user  to  continue  until  a  Screener  is  needed. 
Since  Screeners  are  currently  logged  onto  FSM  one  is  available  for 
assignment.  Upon  receiving  the  request  from  FSMGP,  FASSD  reviews  the  set 
of  FSM  Screeners  that  are  currently  logged  onto  FSM.  Based  on  their 
current  load  (i.e.,  other  WES  users  may  be  logged  onto  FSM)  and  their 
logon  time,  FASSD  makes  the  appropriate  Screener  assignment.  The 
Screener  assignment  is  then  passed  back  to  FSMGP  by  FASSD.  Following 
logon  to  FSM,  FSMGP  logs  the  user  on  to  the  FORSCOM  WWMCCS  complex.  This 
is  accomplished  by  establishing  a  connection  to  WWMCCS  via  the  Remote 
Network  Process  Emulator  (RNPE) .  Following  successful  logon  to  WWMCCS, 
the  WES  user  and  WWMCCS  continue  with  their  dialogue,  with  FSM  as  a 
somewhat  invisible  intermediary.  However,  FSMGP  is  busily  performing 
many  internal  tasks,  one  of  which  is  auditing  specific  events.  This  is 
accomplished  by  writing  out  the  audit  event  and  required  data  which  is 
periodically  moved  to  the  FSM  audit  trail  by  the  FSM  Audit  Daemon  (FAD). 
FAD  is  always  present  in  the  FSM  environment  and  is  responsible  for 
recording  other  processes'  audit  events  into  the  FSM  audit  trail.  During 
the  user/WWMCCS  dialogue,  FSMGP  is  constantly  monitoring  all  data  the 
user  enters  and  all  data  the  WWMCCS  host  is  writing  back  to  the  user.  If 


the  user  inadvertently  enters  illegal  command  sequences  (those  which  are 
either  syntactically  incorrect  or  are  privileged  and  hence  not  available 
to  the  low  user)  FSMGP  will  inform  the  user  of  the  error  and  not  send  the 
input  to  the  WWMCCS  system.  This  is  the  "filtering"  mechanism  of  FSMGP. 
For  WWMCCS  system  output,  FSMGP  determines  if  the  data  is  recognizable 
(termed  "fixed")  or  unrecognizable  (termed  "variable").  If  the  data  is 
recognizable  and  the  user's  current  screen  mode  permits  it,  FSMGP  writes 
the  information  to  the  WES  user's  terminal.  This  is  the  "automatic 
screening"  mechanism  of  FSMGP.  If  the  data  is  not  recognizable  or  if  the 
user's  current  screen  mode  requires  Screener  intervention,  FSMGP  notifies 
the  Screener  Trusted  Process  (SCTP)  that  manual  screening  is  required 
(remember,  FASSO  had  assigned  a  Screener  to  this  specific  WES  user). 
SCTP  notifies  the  Screener  (note,  each  Screener  logged  on  to  FSM  has  a 
separate  copy  of  SCTP)  of  the  "downgrade"  request.  The  variable  data 
from  WWMCCS  is  then  viewed,  a  screen  at  a  time,  for  potential  high  level 
sensitive  information.  The  Screener  will  screen  all  data  and  then  make  a 
decision  whether  to  "downgrade"  the  information.  Let's  assume  for  this 
scenario,  the  Screener  accepts  the  data.  SCTP  then  asks  the  Screener  to 
confirm  his  decision  and  following  confirmation,  notifies  FSMGP  that  the 
data  can  be  written  down  to  the  low  user.  FSMGP  also  audits  this  event 
which  is  then  recorded  into  the  FSM  audit  trail  by  FAD.  The  above 
sequence  is  the  "manual  screening"  mechanism  provided  by  FSM.  This  set 
of  operations  is  continued  until  the  WES  user  logs  off  FSM.  FSMGP  noti¬ 
fies  FASSO  of  the  logoff  and  then  exits. 


As  a  final  comment  on  the  overall  information  flow  of  FSM,  EM  can  also 
peruse  the  FSM  Audit  Trail  via  the  Audit  Trail  Display  Program  (ATDP). 
This  program  is  called  via  the  EMP  as  directed  by  the  EM. 


3.1 .1.1  Programs.  The  FSM  system  consists  of  several  different  programs 
which  are  divided  into  two  classes:  transient  programs  and  daemon  pro¬ 
grams.  A  transient  program  is  normally  brought  into  existence  (i.e., 
becoming  a  process)  via  some  external  event.  Following  satisfaction  of 
this  event  the  process  usually  exits,  hence  the  name  "transient".  Daemon 
programs  are  those  programs  which  are  usually  brought  into  existence  when 
the  system  is  brought  up  and  remain  active  as  a  process  until  the  system 
is  brought  down.  Also,  daemons  usually  perform  functions  which  are  not 
tied  directly  to  some  external  event  (although  almost  always  related 
indirectly  to  some  external  event)  and  appear  "invisible",  hence  the  name 
"daemon". 


3. 1.1 .1.1  FSM  Programs.  Following  is  a  list  of  FSM  programs,  each 
accompanied  with  a  short  description  of  its  function. 


FSM  Guardian  Program  ( FSMGP) 


The  FSM  Guardian  Program  (FSMGP)  interfaces  directly  with  a 
low  WES  site  user  and  is  responsible  for  monitoring  all 
information  flowing  from  the  WES  user  to  the  Top  Secret 
WWMCCS  system  and  vice  versa.  FSMGP  contains  the  WES  user 
"filtering"  and  "automatic  screening"  mechanisms  of  FSM. 
FSMGP  operates  over  a  set  of  extensive  data  structures 


vv. 


representing  the  user/system  dialogue  set  for  a  WES  user. 
Screener  Trusted  Program  (SCTP) 

The  Screener  Trusted  Program  (SCTP)  interfaces  directly  with 
a  FSM  Screener.  The  SCTP  provides  a  verifiably  secure 
mechanism  oy  which  a  Screener  can  review  information  coming 
from  the  FORSCOM  WWMCCS  complex  and  accept/reject  it  for  wri¬ 
ting  down  to  the  low  security  level  user.  The  process  provi¬ 
des  a  "manual"  screening  facility  for  FSM. 

FSM  Assignment  Daemon  (FASSD) 

The  FSM  Assignment  Daemon  (FASSD)  is  responsible  for  making 
initial  Screener  assignments  to  WES  users.  It  also  maintains 
overall  FSM  logon/logoff  information  in  the  Global  Logon  File 
(GLF). 

FSM  Audit  Daemon  (FAD) 

The  FSM  Audit  Daemon  (FAD)  operates  invisibly  within  the  FSM 
environment.  It  is  responsible  for  maintaining  the  current 
FSM  audit  trail.  It  receives  audit  requests  from  the  other 
processes  of  FSM  and  records  these  events  onto  the  current 
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Environment  Manager  Program  (EMP) 


The  Environment  Manager  Program  (EMP)  interfaces  directly 
with  the  FSM  Environment  Manager  (EM),  performing  specific 
tasks  as  directed  by  the  EM.  These  tasks  include  reassigning 
FSM  Screeners  to  WES  site  users,  monitoring  and  modifying  WES 
user  environment  parameters,  and  monitoring  WES  user  activity 
prof i les. 


Audit  Trail  Display  Program  (ATDP) 


The  Audit  Trail  Display  Program  (ATDP)  interfaces  with  the 
FSM  Environment  Manager  (EM).  This  program  allows  the  EM  to 
selectively  display  portions  of  the  FSM  Audit  Trail.  Also, 
ATDP  provides  an  audit  trail  maintenance  facility  by  which 
the  EM  can  save  current  FSM  Audit  Trails  into  other  "time 
stamped"  files. 


Remote  Network  Processor  Emulator  (RNPE) 


The  Remote  Network  Processor  Emulator  (RNPE)  is  responsible 
for  communicating  with  the  FORSCOM  WWMCCS  complex.  It  emula¬ 
tes  (by  multiplexing/de-multiplexing  WES  users)  a  set  of 
users  interfacing  to  the  WWMCCS  complex. 
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3. 1.1. 1.2  Global  Functions.  This  section  provides  descriptions  of  the 
global  functions  implemented  for  the  FSM.  Functions  are  defined  in  the 
literal  sense  as  in  the  C  language,  hence  are  not  programs  but  are  actual 
functions  which  are  compiled  with  the  individual  programs  requiring  their 
services.  The  global  functions  are  described  below. 

3.1.1 .1.2.1  Audit  Function  (GFAUDIT).  To  facilitate  the  logging  of 
audit  events,  a  global  audit  function  is  called  by  all  event  generators. 
The  passed  argument  list  is  variable  except  that  the  first  argument  is 
always  the  one-byte  event  code  (FEVENT).  GFAUDIT  processes  its  arguments 
and  constructs  an  audit  request  file  in  the  audit  queue.  It  returns  to 
the  event  generator  when  this  is  done.  Note:  The  event  generator  does 
not  wait  for  the  event  to  be  logged,  only  entered  into  the  audit  queue. 

Input  Paramaters  -  Inputs  to  GFAUDIT  consist  of  the  passed  arguments. 
With  the  exception  of  the  first  argument  (which  is  always  the  audit  event 
code,  FEVENT),  the  argument  list  is  of  variable  length  and  format.  See 
Table  3-1  for  the  calling  sequences  to  GFAUDIT,  which  are  dependent  upon 
the  event  code;  see  also  Appendix  D  for  detailed  event  definitions. 
These  arguments  are  passed  to  GFAUDIT  by  any  one  of  the  four  event  gen¬ 
erators  (EMP,  FASSD,  FSMGP  or  SCTP) : 

a.  FEVENT  —  The  audit  event  code. 

This  one-byte  quantity  ranges  from  01  to  19  and  indicates 
which  event  occurred.  It  is  used  by  GFAUDIT  to  process  the 
remaining  arguments  passed  to  it. 


SUBSYS  —  The  current  WWMCCS  subsystem  code. 

This  one-byte  quantity  ranges  from  1  to  8  and  indicates  the 
WWMCCS  subsystem  currently  in  use.  A  value  of  zero  indicates 
all  subsystems.  See  Table  3-2  for  the  subsystem  names  and 
their  values. 

SRCFLG  —  Text  Source  Flag 

This  flag  indicates  if  the  audit  text  pointer  (TP)  is  a 
character  pointer  into  a  buffer  (0)  or  if  it  is  a  character 
pointer  to  a  filename  (1)  which  contains  the  text  to  audit. 

TP  —  The  audit  text  pointer  or  filename  where  text  can  be 
found. 

This  character  pointer  is  used  to  reference  the  beginning  of 
the  audit  text  (system. output  or  user  input).  The  event  gen¬ 
erator  will  set  up  this  pointer  and  use  a  buffer  for  storage 
of  the  text.  Alternatively,  if  there  is  a  large  amount  of 
text  the  event  generator  will  write  a  disk  file  instead  of 
allocate  in-core  buffers.  In  this  case,  the  SRCFLG  will  be 
set  to  one,  not  zero,  as  in  the  case  of  buffers.  Upon  return 
from  GFAUOIT,  the  caller  may  de-allocate  the  buffer  since  the 
text  is  copied  by  GFAUDIT  into  the  Audit  Request  File. 


FAXLEX  —  The  coded  reason  why  user  input  was  not  sent. 

This  one-byte  quantity  ranges  from  1  to  2  and  indicates  the 
reason  why  user  input  was  not  sent  to  WWMCCS  by  FSMSP.  A 
value  of  1  indicates  no  match  was  made  with  the  user  input, 
while  a  value  of  2  indicates  a  match  was  made  but  the  input 
was  disallowed.  This  value  is  only  used  in  Event  02  (User 
Input  Not  Sent). 

SCRID  —  The  FSM  user  ID  of  the  Screener 

This  one-byte  quantity  is  identical,  in  concept,  to  the  UNIX 
user  ID  and  serves  to  uniquely  identify  the  Screener  involved 
in  this  event. 

STATUS  —  The  status  of  the  subsystem  initiation 

This  one-byte  quantity  indicates  success  (1)  or  failure  (0) 
when  a  user  attempts  to  initiate  a  WWMCCS  subsystem.  Note: 
Logon  is  not  considered  a  valid  WWMCCS  subsystem  in  this  con¬ 
text.  This  argument  is  only  used  in  Event  11  (User  Initiated 
WWMCCS  Subsystem). 

USERIO  —  The  FSM  user  ID  of  the  WES  user 

Identical  to  the  SCRID  argument,  except  that  it  identifies 
the  WES  user  involved  in  the  event.  A  value  of  -1  indicates 


all  users 


USRTTY  —  The  WES  user's  UNIX  terminal  identifier 

This  one-byte  quantity  identifies  the  user  terminal  involved 
with  this  event.  It  is  the  last  character  of  the  user's  UNIX 
terminal  name  <"/dev/tty?") . 

SCRTTY  —  The  Screener's  UNIX  terminal  identifier 

This  one-byte  value  is  identical  to  the  USRTTY  argument/  with 
the  exception  that  it  identifies  the  Screener  terminal  invol¬ 
ved  in  this  event. 

SCMODE  —  The  current  screen  mode 

This  one-byte  quantity  indicates  whether  no  (0)/  normal  (1) 
or  all  (2)  screening  is  now  in  effect.  It  is  only  passed  for 
Event  14  (Screen  Mode  Modified). 

RATE  —  The  bandwidth  threshold  for  messages 

This  one-byte  quantity  indicates  the  number  of  messages  which 
may  be  automatically  downgraded  without  Screener  interven¬ 
tion.  It  must  be  a  positive  integer  in  the  range  of  one  to 
127. 

EMIO  —  The  FSM  user  ID  of  the  Environment  Manager 

This  one-byte  quantity  is  identical  to  the  SCRID  and  USERID 
arguments/  with  the  exception  that  it  identifies  the  Environ¬ 
ment  Manager  involved  in  this  event. 
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EMTTY  —  The  Em's  UNIX  terminal  identifier 


This  one-byte  quantity  is  identical  to  the  USRTTY  and  SCRTTY 
agruments,  with  the  exception  that  it  identifies  the  EM  ter¬ 
minal  involved  in  this  event. 

Output  Parameters  -  None. 

Operation  -  GFAUDIT  assumes  that  the  first  argument  passed  to  it  is  the 
one-byte  event  code  (FEVENT).  It  uses  this  event  code  as  a  switch  to 
decode  the  remaining  arguments.  After  the  arguments  are  extracted,  GFAU¬ 
DIT  must  obtain  additional  event  data,  such  as  the  DTG  of  the  event  and 
its  size.  GFAUDIT  then  constructs  an  Audit  Request  filename  from  the 
event  DTG,  the  process  ID  of  the  event  generator  (EMP,  FASSD,  FSMGP  or 
SCTP)  and  a  random  character.  This  file  is  created  in  the  Audit  Request 
Queue  and  the  event  record  is  written  as  record  one.  If  there  is  also 
text  to  audit  (implies  passing  the  TP  and  SRCFLG  arguments),  GFAUDIT 
copies  the  text  into  the  second  and  possibly  additional  records.  The 
text  is  copied  "as  is".  It  is  null-terminated.  GFAUDIT  then  closes  the 
Audit  Request  File  and  returns  control  to  the  calling  process. 
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Table  3-1.  GFAUDIT  Calling  Sequences 


Code 

Description 

Catling  Sequence 

Caller 

01 

User  Input  Sent  to  WWMCCS 

gfaudit(01,  userid/ 
usrtty/  srcflg/  tp> 

FSMGP 

U2 

User  Input  not  Sent  to  WWMCCS 

gf audit (02/  userid/ 
usrtty,  subsys/  fai lex/ 
srcflg/  tp) 

FSMGP 

03 

System  Output  Sent  to  User 

gf audit (03/  userid/ 
usrtty/  srcflg/  tp) 

FSMGP 

04 

System  Output  not  Sent  to  User 

gfaudit(04/  userid/ 
usrtty/  subsys/  srcflg, 
tp) 

FSMGP 

05 

System  Output  Accepted  by  Screener 

gfaudit(05,  userid, 
usrtty,  subsys,  scrid, 
scrtty,  srcflg,  tp) 

FSMGP 

06 

System  Output  Rejected  by  Screener 

gfaudit(06,  userid, 
usrtty,  subsys,  scrid, 
scrtty,  srcflg,  tp) 

FSMGP 

07 

Screener  Logged  onto  FSM 

gfaudit(07,  scrid, 
scrtty) 

FASSD 

08 

Screener  Logged  off  FSM 

gfaudit(08,  scrid, 
scrtty) 

FASSD 

09 

WES  User  Logged  onto  FSM 

gfaudit(09,  userid, 
usrtty) 

FSMGP 

10 

WES  User  Logged  off  FSM 

gfaudit(10,  userid, 
usrtty) 

FASSD 

11 

User  Initiated  WWMCCS  Subsystem 

gf audit (11,  userid, 
usrtty,  subsys,  status) 

FSMGP 

12 

User  Assigned  to  Screener 

gfaudit(12,  userid, 
usrtty,  scrid,  scrtty) 

FASSD 

13 

User  Input  Simulated 

gfaudit(13,  userid, 
usrtty,  subsys,  srcflg, 

tp) 

FSMGP 

14 

Screen  Mode  Modified 

gfaudit(14,  subsys, 
userid,  scmode) 

EMP, 

FSMGP 

15 

Bandwidth  Threshold  Modified 

gfaudit(15,  userid, 
rate) 

EMP 

16 

EM  Logged  onto  FSM 

gfaudit(16,  emid,  emtty) 

EMP 

17 

EM  Logged  off  FSM 

gfaudit(17,  emid,  emtty) 

EMP 

18 

System  Output  Received  by  FSMGP 

gfaudit(18,  userid, 
usrtty,  subsys,  srcflg, 

tp) 

FSMGP 

19 

Downgrade  Request  Review  Begun 

gfaudit(l9,  scrid. 

SCTP 

scrtty,  subsys) 


3. 1.1. 1.2. 2  Date  Conversion  Function  (GFDTGTOA) 


Input  Parameters 


GFDTGTOA  requires  a  pointer  to  a  buffer  to  store  the  converted  ASCII 
time. 

Output  Parameters  -  GFDTGTOA  outputs  a  pointer  to  the  null  character  that 
terminates  the  converted  ASCII  string. 

Operation  -  GFDTGTOA  provides  a  common  means  for  other  processes  to 
obtain  a  null-terminated  ASCII  string  of  the  current  Date-Time  Group. 
GFDTGTOA  uses  a  UNIX  function  to  obtain  the  current  date  and  then  con¬ 
verts  that  to  an  ASCII  string  of  the  form  MMDDHHmmss  (Month,  Day,  Hours, 
minutes,  seconds). 

3. 1.1. 1.2. 3  String  Match  Function  (GFEQUAL) .  Input  Parameters  -  poin¬ 
ters  to  two  null-terminated  strings  to  be  tested  for  equality. 

Output  Parameters  -  GFEQUAL  outputs  a  value  of  1  if  the  strings  are 
equal,  zero  otherwise. 

Operation  -  GFEQUAL  does  a  character-by-character  comparison  of  the  two 
strings  until  a  mismatch  occurs  or  the  end  of  one  is  reached. 

3.1. 1.1 .2. 4  Error  Function  (GFERROR).  Input  Parameters  -  GFERROR 
requires  one  input  parameter  -  an  error/message  number.  GFERROR  will 
accept  any  number  of  variable  length  null-terminated  ASCII  strings  fol¬ 
lowing  the  error/message  number. 
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Output  Parameters  -  None 


Operation  -  GFERROR  provides  a  common  means  for  the  output  of 
errors/messages  to  a  user  and  system  errors/messages  to  the  system  con¬ 
sole.  The  first  input  parameter  is  an  error/message  number  which  speci¬ 
fies  the  error/message  to  be  output.  This  number  represents  a  canned 
message.  If  the  number  is  greater  than  500,  then  the  error/message  will 
be  output  to  the  system  console  and,  in  addition,  if  it  is  a  system  error 
and  the  standard  output  (file  descriptor  1)  is  a  terminal,  a  standard 
message  will  be  output  to  the  user  indicating  that  a  system  error  has 
occurred.  Any  further  parameters  will  be  inserted  into  the  error/message 
at  points  where  asterisks  are  encountered.  Note:  If  GFERROR  encounters 
a  system  error  itself,  it  will  output  that  error  instead  of  the  one  with 
which  it  was  called. 

If  the  error  is  not  a  system  error,  the  error  message  number  indicates 
the  appropriate  error  description  item  in  GFEDES  (error  description  file) 
which  in  turn  contains  pointers  to  the  canned  message  text  contained  in 
GFEnES.  Any  character  strings  also  provided  as  input  parameters  will  be 
inserted  in  the  canned  message  at  points  where  asterisks  are  encountered. 
After  printing  the  message  to  the  user's  terminal  (or  the  system  console 
for  a  system  error/message),  GFERROR  returns  to  the  calling  function. 

GFERROR  uses  library  functions  GFlOCK  and  GFUNLOCK  to  lock  and  unlock  the 
system  console  in  order  to  output  system  errors/messages.  For  this 
reason,  it  is  mandatory  that  the  calling  program  not  have  the  system  con¬ 
sole  locked  when  calling  GFERROR. 
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GFERROR  also  uses  two  internal  functions.  These  are: 


a.  gfout  -  internal  function  which  outputs  a  string. 


b.  gfia  -  internal  function  which  converts  integer  to  ASCII. 


Input  is  an  integer,  output  is  a  pointer  to  a  null-terminated 


string  in  a  fixed  buffer  (max  of  9  characters). 


3. 1.1. 1.2. 5  Obtain  User's  Logon  Name  (GFGETNAME).  Input  Parameters  - 


UNIX  user  ID. 


Output  Parameters  -  GFGETNAME  returns  a  pointer  to  the  user's  logon  name 


or  to  the  strings  "none"  or  "unknown",  depending  upon  the  user  ID  passed. 


Operation  -  GFGETNAME  opens  the  UNIX  password  file  and  searches  for  the 


passed  user  ID.  If  found,  GFGETNAME  returns  a  pointer  to  the  user's 


logon  name.  Otherwise,  GFGETNAME  returns  a  pointer  to  the  string  "unk¬ 


nown".  If  no  user  ID  is  passed  to  GFGETNAME,  it  returns  a  pointer  to  the 


string  "none". 


3. 1.1. 1.2. 6  File  Copy  Function  (GFILECOPY).  Input  Parameters 


GFILECOPY  requires  three  input  parameters: 


A  flag  with  the  following  values: 


0  -  Create  destination  file. 


1  -  Append  data  to  existing  destination  file. 


Pathname  of  source  file. 


Pathname  of  destination  file. 
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Output  Parameters  -  GFILECOPY  returns  a  null  if  the  copy  was  successful, 
or  a  positive  system  error  number  (with  which  to  call  GFERROK)  if  unsuc¬ 
cessful. 

Operation  -  GFILECOPY  provides  a  mechanism  for  the  copying  of  one  file  to 
another.  The  first  input  parameter  is  a  flag  which  specifies  whether  the 
destination  file  is  to  be  created  or  not.  If  the  flag  is  set,  the  des¬ 
tination  file  is  assumed  to  exist,  and  if  it  cannot  be  opened,  GFILECOPY 
will  return  with  an  error  (Open  error).  The  second  input  parameter  is 
the  pathname  of  the  source  file,  and  the  third  input  parameter  is  the 
pathname  of  the  destination  file.  GFILECOPY  first  attempts  to  open  the 
source  file.  If  unsuccessful,  then  it  returns  an  open  error  to  the  cal¬ 
ling  function.  Otherwise,  GFILECOPY  attempts  to  open/create  the  destina¬ 
tion  file,  depending  on  the  value  of  the  input  flag.  If  the  action  is 
unsuccessful,  GFILECOPY  returns  an  open/create  error  to  the  calling  pro¬ 
cess.  If  append  is  indicated,  GFILECOPY  seeks  to  the  end  of  the  destina¬ 
tion  file  before  beginning  the  copy.  It  then  reads  blocks  of  data  from 
the  source  file  and  writes  them  to  the  destination  file  until  the  End- 
Of-File  (EOF)  of  the  source  file  is  reached.  If  a  read  or  write  error  is 
encountered  at  any  time,  GFILECOPY  returns  that  error  to  the  calling 
function.  Otherwise,  after  a  successful  copy,  both  files  are  closed  and 
GFILECOPY  returns  a  successful  value  to  the  calling  function. 

3. 1.1. 1.2. 7  Integer  to  ASCII  Function  (GFITOS).  Input  Parameters  -  an 
integer  to  be  converted  to  an  ASCII  string. 

Output  Parameters  -  GFITOS  returns  a  pointer  to  the  beginning  of  the 


ASCII  string 


Operation  -  GFITOS  allocates  space  for  the  ASCII  string  and  then  uses  a 
modulo  operation  to  fill  the  buffer  from  the  end  to  the  beginning.  If 
the  input  integer  was  less  than  zero,  GFITOS  prepends  a  minus  sign 
character  to  the  ASCII  string. 

3. 1.1. 1.2. 8  Lock  Function  (GFLOCK).  Input  Parameters  -  G FLOCK  requires 
one  input  parameter  -  a  pathname  of  the  file  to  be  locked. 

Output  Parameters  -  None. 

Operation  -  GFLOCK  provides  a  common  means  for  the  locking  of  data  files 
which  must  be  updated  by  more  than  one  process.  GFLOCK  first  builds  a 
“lock-file"  pathname  by  concatenating  the  string  "-lock"  to  the  supplied 
pathname.  GFLOCK  then  attempts  to  create  the  lock-file  with  a  read-only 
mode.  If  the  file  already  exists,  an  error  status  is  received.  GFLOCK 
then  sleeps  for  one  second  and  then  attempts  the  create  again.  Eventu¬ 
ally,  the  create  is  successful  and  GFLOCK  returns  to  the  calling  func¬ 
tion.  At  this  point,  the  file  is  "locked-out"  from  other  read-for-update 
attempts.  Of  course,  this  assumes  the  cooperation  of  other  processes 
which  update  this  file  to  call  GFLOCK  prior  to  such  updates.  The  file 
can  now  be  updated,  and  after  the  update  is  complete  it  is  mandatory  that 
the  calling  process  call  the  GFUNLOCK  function  to  "unlock"  the  file. 
Note:  The  user  ID  of  the  calling  process  must  not  be  that  of  the 
superuser  since,  in  that  case,  the  create  is  always  successful  even  if 
the  file  does  already  exist. 


3. 1.1. 1.2. 9  Leading  Zero  Integer  to  ASCII  Conversion  Function  (GFLZI- 
TOA).  Input  Parameters  -  GFLZITOA  requires  three  parameters: 


* 


a.  Number  of  digits  to  convert  to  a  string. 

b.  Integer  value  to  convert. 

c.  A  pointer  to  a  user  supplied  buffer  to  place  the  converted 
string  in. 

Output  Parameters  -  None. 

Operation  -  GFLZITOA  first  converts  the  integer  to  an  ASCII  string,  using 
the  same  technique  as  does  GFITOS.  It  then  checks  the  leading  characters 
of  the  ASCII  string  and  if  they  are  blank,  GFLZITOA  converts  them  to 
character  zeroes.  Finally,  the  ASCII  string  is  stored  character-by- 
character  beginning  at  the  buffer  location  given  by  the  third  argument. 

3.1.1.1.2.10  List  Match  Function  (GFMATCHLIST) .  Input  Parameters  -  a 
pointer  to  an  array  of  strings  and  a  pointer  to  a  string  to  match  to  the 
array. 

Output  Parameters  -  GFMATCHLIST  returns  the  index  of  the  array  string 
matched,  if  found.  Otherwise  it  returns  a  -1  for  no  match  or  a  -2  if  a 
match  was  made  to  more  than  one  array  string. 


Operation  -  GFMATCHLIST  first  makes  certain  both  array  and  search  string 
are  lower  case,  and  then  searches  the  input  array  for  any  occurances  of 
the  input  string.  If  only  one  exact  match  is  made,  the  index  of  the 
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matched  array  string  is  returned.  Otherwise  a  -1  is  returned  if  no  match 
is  found  or  a  -2  is  returned  if  multiple  array  strings  matched  the  input 
st  ring. 


3.1.1.1.2.11  String  Match  Function  (GFNEQUAL).  Input  Parameters  -  GFNE¬ 
QUAL  requires  three  input  parameters: 

a.  Length  of  match. 

b.  Pointer  to  a  string  to  match. 

c.  Pointer  to  a  second  string  to  match  with. 

Output  Parameters  -  GFNEQUAL  returns  a  1  if  both  strings  are  equivalent 
for  the  amount  of  characters  specified/  otherwise  a  zero  is  returned. 

Operation  -  GFNEQUAL  compares  the  two  strings  character-by-character 
until  a  mismatch  is  detected  or  the  specified  number  of  bytes  have  been 
checked,  whichever  occurs  first. 

3.1.1.1.2.12  Read  IPC  Function  (GFRIPO.  Input  Parameters  -  GFRIPC 
requires  three  input  parameters: 

a.  A  file  descriptor  for  the  port. 

b.  A  pointer  to  a  user  supplied  buffer  in  which  to  store  an  IPC 
message. 

c.  A  flag  with  the  following  value: 

0  -  Block  on  port  read. 

1  -  Poll  on  port  read. 
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2  -  Block  on  port  read,  but  return  EOF  if  all 
writers  die. 

Output  Parameters  -  GFRIPC  returns  the  number  of  bytes  in  the  current  IPC 
message,  0  for  EOF,  or  -1  if  a  read  error  has  occurred. 

Operation  -  GFRIPC  provides  a  common  means  for  the  reading  of  ports.  The 
first  input  parameter  is  a  file  descriptor  which  the  user  obtained  from  a 
successful  port  call.  The  second  input  parameter  is  the  location  of  a 
buffer  into  which  the  input  IPC  message  will  be  placed.  The  third  input 
parameter  is  a  flag  with  three  values.  The  value  of  zero  (0)  indicates 
that  the  caller  wishes  to  block  on  port  reads,  i.e.,  does  not  want  GFRIPC 
to  return  until  a  message  has  been  read.  The  value  of  one  (1)  indicates 
that  the  caller  does  not  want  to  block  on  reads,  but  wants  GFRIPC  to 
return  EOF  if  there  is  no  data  available.  The  value  of  two  (2)  indicates 
that  the  caller  wishes  to  block  on  port  reads,  but  does  want  GFRIPC  to 
return  EOF  if  all  of  its  writers  have  died.  GFRIPC  returns  one  of  three 
values.  A  count  is  returned  if  an  IPC  message  has  been  read.  An  EOF  (0) 
is  returned  if  the  user  has  indicated  that  polling  is  desired  and  there 
is  no  data,  or  if  the  user  has  indicated  that  partial  blocking  is  desired 
and  all  writers  have  died.  A  minus  one  (-1)  is  returned  if  GFRIPC 
encounters  a  read  error  from  the  port. 

GFRIPC  uses  the  alloc  and  free  system  calls  in  order  to  buffer  up  IPC 
messages  from  more  than  one  writer. 


GFRIPC  first  checks  if  polling  is  wanted,  and  if  so  performs  an  EMPTY 
call  on  the  supplied  file  descriptor.  If  no  data  is  available,  GFRIPC 
returns  a  no  data  value  to  the  calling  function.  Otherwise,  it  reads  on 
the  supplied  file  descriptor.  If  a  system  error  occurs  (read  error),  a 
read  error  value  is  returned  to  the  calling  function.  If  an  End-Of-File 
(EOF)  is  encountered  (all  writers  have  died)  and  partial  blocking  was 
requested,  a  no  data  value  is  returned  to  the  calling  function.  Oth¬ 
erwise,  GFRIPC  reads  an  IPC  header.  If  this  is  the  first  block  for  this 
message  (indicated  by  the  Process  ID  (PID)  in  the  header),  then  GFRIPC 
allocates  enough  core  for  an  entire  message.  If  this  is  not  the  first 
segment  of  a  message,  then  GFRIPC  searches  for  the  start  of  the  message 
in  already  allocated  core.  It  then  reads  the  block  of  data  into  the  allo¬ 
cated  core.  If  this  is  the  end  of  a  message,  then  GFRIPC  moves  the 
entire  message  into  the  user  supplied  buffer,  deallocates  the  core  and 
returns  the  number  of  characters  in  the  message  to  the  calling  function. 
Otherwise,  it  reads  again  on  the  port  for  another  message  segment. 

3.1.1.1.2.13  Compute  String  Size  Function  (GFSIZE).  Input  Parameters  - 
a  pointer  to  a  null-terminated  string  whose  size  is  to  be  computed. 

Output  Parameters  -  the  number  of  characters  in  the  string. 

Operation  -  GFSIZE  steps  through  the  string  counting  characters  until  it 
finds  a  null  character.  It  then  returns  the  character  count  to  the  cal¬ 
ler.  Note:  the  terminating  null  byte  is  not  included  in  the  count. 


a.  A  flag  specifying  interpretation  of  the  second  parameter: 

U  -  second  parameter  is  a  pathname  of  a  port 
to  open  for  write, 

1  -  second  parameter  is  a  file  descriptor  of  a 
port  already  opened. 

b.  Pathname  of  a  port,  or  a  file  descriptor  depending  on  the 
value  of  the  first  parameter. 

c.  IPC  message  type  as  defined  in  the  FSM  global  data. 

d.  Optional  parameters,  in  the  following  order  if  present:  User 
ID,  Bandwidth  rate.  Screen  Mode,  Subsystem  index,  user  secu¬ 
rity  classification,  pathname  of  a  downgrade  file,  pathname 
of  a  context  file. 

Output  Parameters  -  GFWIPC  returns  the  status  of  the  write:  0  -  suc¬ 

cessful,  positive  error  number  with  which  to  call  GFERROR  if  write  was 
unsuccessful . 

Operation  -  GFWIPC  provides  a  common  means  for  writing  to  ports.  The 
first  input  parameter  is  a  flag  which  tells  GFWIPC  whether  the  second 
parameter  is  a  pathname  of  a  port  to  open  or  a  file  descriptor  of  an 
already  opened  port.  The  second  input  parameter  is  then  either  a  file 
descriptor  or  a  port  pathname.  The  third  input  parameter  is  an  IPC  mes¬ 
sage  type  which  will  be  stored  in  the  IPC  port  message  structure.  Any 
other  parameters  are  data  to  be  stored  in  the  IPC  port  message  structure. 


GFWIPC  sets  up  the  IPC  message  in  the  structure  according  to  the  input 
parameters  which  have  been  passed.  If  a  pathname  was  input,  then  GFWIPC 
opens  the  port.  If  the  open  is  unsuccessful,  an  open  error  is  returned 
to  the  calling  function.  Otherwise,  GFWIPC  writes  the  IPC  message  to  the 
opened  port.  If  a  write  error  occurs,  then  GFWIPC  returns  a  write  error 
to  the  calling  function.  If  a  pathname  was  input,  GFWIPC  closes  the 
port.  It  then  returns  to  the  calling  function  with  a  successful  value. 

3. 1.1.2  Data  Structures.  The  state  of  FSM  is  contained  in  a  set  of  data 
structures  which  can  be  divided  into  two  types: 

a.  non-volatile  disk  files 

b.  volatile  message  queues  (i.e.,  ports) 

Disk  files  are  used  to  contain  that  information  which  must  be  saved 
through  continuous  day-in  and  day-out  operations  of  FSM.  Audit  trail 
information  is  a  good  example  of  information  contained  in  disk  files.  In 
addition  other  system  oriented  information  must  be  maintained  in  disk 
files  in  order  for  FSM  to  operate  correctly;  i.e.,  predefined  data  which 
represents  the  user/WWMCCS  dialogue  contexts.  Volatile  data  is  that  data 
which  is  not  needed  in  FSM  for  long  periods  of  time;  message  queues  for 
inter-process  communication  (IPC)  are  good  examples  of  volatile  data. 
All  message  queues  will  be  implemented  in  FSM  via  the  port  data  struc¬ 
ture.  Ports  provide  sophisticated  First-In,  First-Out  (FIFO)  queues  for 
efficient  inter-process  communication  between  processes.  In  addition, 
ports  allow  inter-process  communication  across  different  process  fami- 


lies,  hence  allow  transient /daemon  process  communication. 

Figure  3-2  illustrates  the  entire  FSM  di rectory /data  structure  hierarchy. 
Before  describing  this  structure  the  notational  conventions  used  in  this 
figure  will  be  defined. 

a.  Rectangles  represent  files  or  directories  with  the 
file/directory  name  appearing  on  top.  The  name  is  followed 
by  "(d)''  if  it  represents  a  UNIX  directory,  and  "(f)"  if  it 
is  a  disk  file. 

b.  Disk  files  entered  in  a  directory  have  their  names  inside  the 
rectangle  representing  their  presence. 

c.  Circles  represent  ports,  with  the  port  name  appearing  inside 
the  circle. 

d.  UNIX  C-structure  names  appear  in  capital  letters  (e.g., 
(iPROF). 

e.  Special  lock-files  are  denoted  as  dashed-line  entries  in 
directories  (e.g.,  gaud-lock). 

f.  Symbolic  names  are  employed  to  depict  multiple  occurrences  of 
a  name.  For  example  "user-1"  through  "user-n"  is  used  to 
depict  different  FSM  WES  users. 


FSM  Directory/File  Hierarchy 


To  determine  the  entire  UNIX  pathname  of  any  given  data  structure,  each 
di rectory-to-di rectory/f i le/port  must  be  concatenated  together.  For 
example,  the  pathname  for  the  profile  file  of  WES  user-i  is  "/fsm/usr/ 
user-i/gprof Similarly,  the  absolute  pathname  for  the  Assignment  Dae¬ 
mon  (FASSD)  input  port  is  "/f sm/port/faport". 

Before  going  into  the  detailed  descriptions  of  the  individual  data  struc¬ 
tures  depicted  in  Figure  3-2  a  general  overview  will  be  given  on  the 
entire  di rectory/data  structure  hierarchy. 

All  directory/data  structures  originate  directly  or  indirectly  from  the 
UNIX  “root"  directory,  termed  "/".  FSM  will  have  its  own  directory  with 
the  absolute  pathname  of  "/fsm".  It  contains  system  Level  data  structure 
entries  and  other  related  directories.  System  level  data  structures  are 
the  user  logon  file  ("/fsm/glf ")  which  contains  information  on  all  FSM 
personnel  and  WES  users  currently  logged  onto  FSm;  the  system  level 
environment  file  ("/fsm/genv")  which  contains  information  currently 
representing  system-wide  FSM  environment  values;  the  user/system  dialog 
context  structures  for  teletypewriter  ("/fsm/gcont.tty",  "/fsm/ghdel.tty" 
and  "/fsm/gtext.tty")  and  VIP  ("/fsm/gcont. vip",  "/fsm/ghdel.vip"  and 
"/fsm/gtext.vip")  terminals  which  control  the  automatic  output  screening 
and  input  filtering  mechanisms  of  FSM;  the  error  description  file 
("/fsm/gedes")  which  contains  a  pointer  to  the  first  character  of  an 
error  message  text  and  number  of  characters  in  the  message  (used  by  GFER- 
ROR);  the  error  messages  themselves  <"/f sm/gemes"> ;  and  finally,  the  glo¬ 
bal  terminal  file  <"/fsm/gttys")  which  is  used  by  the  FSMGTTY  program  to 


start  up  a  Guardian  Process  for  specified  WES  terminals 


The  FSM  directory  contains  three  directories  relevant  to  data  structures: 
the  low  user  directory  <"/fsm/usr") ,  the  FSM  audit  trail  directory 
("/fsm/fsat")  and  the  IPC  port  directory  ("/fsm/port") .  The  user  direc¬ 
tory  contains  entries  to  individual  directories  for  each  WES  user  logged 
on  to  FSM.  Individual  directories  exist  regardless  of  whether  the  user 
is  logged  on  or  not.  For  user-i,  the  directory  ''/fsm/usr/user-i"  would 
contain  four  data  structure  references;  the  user  profile  file 
("/fsm/usr/user-i/gprof''> ,  the  user  environment  file  ("/fsm/usr/user- 
i/genv"),  the  downgrade  file  ("/fsm/usr/user-i/gdown")  and  the  user  down¬ 
grade  context  information  file  ("/fsm/usr/user-i/ginfo") .  The  FSM  audit 
trail  directory,  ''/fsm/fsat*',  contains  the  entire  FSM  audit  trail 
environment.  This  directory  resides  on  a  separate  file  system  to  ensure 
the  security  of  the  generated  audit  trail,  since  it  will  contain  Top 
Secret  data.  The  directory  contains  one  directory  and  two  classes  of 
audit  trail  events/texts,  and  one  lock-file.  The  primary  audit  file  data 
structure  is  "/fsm/fsat/gaud"  which  contains  information  describing  the 
•current  state  of  the  FSM  audit  trail.  Directory  "/fsm/fsat/audi tq"  is 
used  by  FSM  processes  for  registering  audit  trail  events.  For  example, 
the  FSM  Guardian  Program  (FSMGP)  in  auditing  an  event  would  insert  an 
entry  into  this  directory  using  the  current  Date-Time  Group  (DTG),  its 
process  identifier  (PID)  and  a  random  character  as  a  file  name.  This 
combination  ensures  uniqueness  within  the  directory  "/fsm/fsat/auditq”. 
Data  structure  "/fsm/fsat/current .e"  and  "/fsm/fsat/current.t"  contain 
the  event  and  text  information  respectively  of  the  current  audit  trail. 
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Similarly,  data  structure  entries  "/fsm/fsat/dtg.ei"  and 
"/fsm/fsat/dtg .ti"  contain  previously  saved  audit  trails  and  are  identi¬ 
fied  by  a  unique  DT6.  Finally,  the  lock-file,  "/f sm/fsat/gaud-lock"  is 
used  when  the  audit  trail  file  is  being  updated  (i.e.,  the  file 
•'/fsm/fsat/gaud") . 

The  last  directory  in  the  main  FSM  directory  is  the  port  directory 
("/fsm/port").  This  directory  contains  all  FSM  ports.  FSM  utilizes 
five  basic  ports,  the  FSM  Assignment  Daemon  (FASSD)  port  ("/fsm/port/ 
faport"),  the  FSM  Screener  assignment  port  ("/fsm/port/fsagn-i") ,  the 
Screener  request  port  ("/fsm/port/screq-i") ,  Screener  reply  port 
<"/fsm/port/fsrly-i")  and  the  Screener  logoff  port  ("/fsm/port/sclog-i") . 
The  fsagn  and  fsrly  ports  exist  for  each  logged  on  WES  user,  while  the 
screq  and  sclog  ports  exist  for  each  Screener  that  is  logged  on.  These 
four  portnames  are  constructed  for  uniqueness  using  the  owner's  FSM  user 
ID  (hence  the  "-i").  All  ports  only  exist  when  the  reading  process  is 
activated  within  FSM.  Note,  since  FASSD  is  a  daemon  the  faport  is  always 
present. 


3. 1.1. 2.1  Disk  File  Descriptions.  Each  disk  file  that  appears  in  Figure 
3-2  will  be  described  in  detail  in  the  following  sections. 

3.1.1 .2.1.1  GCONT  (Global  Context  File).  This  structure  provides  the 
information  FSM6P  needs  to  follow  a  user's  progress  through  the  various 
WWMCCS  subsystems  allowed  in  the  restricted  environment.  It  is  tree-like 
in  its  structure,  since  any  given  item  will  reference  several  other  items 
in  the  file.  The  file  contains  a  series  of  CONTEXT  items.  A  CONTEXT 


i tern  (termed  "CONTEXT")  represents  all  possible  recognizable  user  inputs 
and/or  system  outputs  at  a  branch  of  the  input/output  dialog  tree. 

Each  CONTEXT  item  contains  a  HEADER  item  and  one  or  more  SUBCONTEXT 
items.  A  HEADER  and  SUBCONTEXT  define  a  CONTEXT.  See  Figure  3-3  for  a 
depiction  of  their  relationship.  The  HEADER  supplies  information  that  is 
applicable  to  the  entire  CONTEXT  while  SUBCONTEXTs  supply  information 
relevant  to  a  given  user  input  or  system  output.  The  HEADER  allows  FSMGP 
to  know  when  to  stop  accumulating  system  output  or  user  input.  It  also 
provides  default  actions  on  error  conditions.  Figure  3-4  shows  a  HEADER 
item.  A  CONTEXT  can  have  one  or  more  SUBCONTEXTs,  depending  on  the  pos¬ 
sible  recognizable  user  inputs/system  outputs  at  this  stage  of  the 
user/system  dialog.  All  SUBCONTEXTs,  whether  user  input  or  system  output 
are  the  same  size.  See  Figure  3-5  for  a  SUBCONTEXT  item  description. 

HEADER  Field  Descriptions 

GPOPTR  The  pop-up  context  pointer  points  to  a  recovery  CONTEXT  item  when 
FSMGP  encounters  an  error  condition  or  a  user-entered  break. 
Error  conditions  include  a  no  match  condition  between  current 
SU8C0NTEXT  items  and  system  output,  a  time-out  condition  on  sys¬ 
tem  reads,  and  Screener  rejection  of  system  output.  FSMGP 
usually  performs  some  action  (i.e.  simulate  user  input)  to  resyn¬ 
chronize  its  processing  with  the  next  system  output  and  then  pro¬ 
ceeds  to  the  appropriate  CONTEXT.  GPOPTR  points  to  this  item,  in 
general  a  higher  level  within  a  given  WWMCCS  subsystem. 
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Figure  3-4.  GCON  Header  Item 
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Figure  3-5.  GCON  Subcontext  Item 


GDLIMP  The  delimiter  set  pointer  points  to  a  byte  offset  in  the  Halting 
Delimiter  file  at  which  the  particular  delimiter  set  for  this 
CONTEXT  resides.  FSMGP  reads  user  input  or  system  output  until 
one  of  these  strings  is  matched. 

GNSU8S  The  number  of  subcontexts  field  specifies  the  number  of  SUBCON¬ 
TEXT  s  comprising  this  CONTEXT.  Since  SUBCONTEXTs  are  of  a  fixed 
size,  this  value  can  be  used  in  reading  the  complete  CONTEXT  for 
processing  by  FSMGP. 

GCONFL  The  header  flags  field  contains  various  bit  settings  representing 
conditions  of  the  CONTEXT  as  a  whole,  in  contrast  to  states 
specific  to  individual  SUBCONTEXTs.  The  following  bit  settings 
are  used: 

BOTH  User  Input  and  System  Output  (1).  This  bit,  when  set,  sig¬ 
nifies  that  either  user  input  or  system  output  can  be 
expected  next.  When  this  bit  is  set,  FSMGP  must  poll  both 
the  user  and  the  system  for  the  next  data.  Note:  when 
this  bit  is  set,  the  USR  bit  is  ignored. 

USR  User  input(l)  /  System  Output  (0).  This  bit  signifies 

whether  the  CONTEXT  represents  user  input  or  system  output. 
It  is  only  used  when  the  BOTH  bit  is  zero. 

RPT  Repeating  CONTEXT  (1)  /  Non-repeating  CONTEXT  (0).  This 

bit  signifies  whether  the  CONTEXT  requires  multiple  itera¬ 
tions  of  the  FSMGP  Read  System  Output  (RSO)  function  in 
order  to  satisfy  a  single  SUBCONTEXT. 

FIX  Fixed  Repeating  CONTEXT  (1)  /  Variable  Repeating  CONTEXT 


(0).  Only  applicable  when  the  RPT  bit  is  set  to  one.  In 
either  situation  of  this  bit  setting,  multiple  calls  to  the 
RSO  function  are  required  in  order  to  satisfy  this  CONTEXT, 
for  fixed  CONTEXTS,  FSMGP  will  call  the  Read  System  Output 
function  repeatedly,  doing  a  continuous  match  on  the  indi¬ 
cated  search  string  specified  by  the  single  SUBCONTEXT. 
This  will  allow,  for  example,  a  simple  delimiter  string  set 
for  halting  by  the  RSO  function  (probably  line-by-line  for 
some  lengthy  output;  e.g.,  TCON  skeletons).  For  variable 
CONTEXTS,  FSMGP  will  accumulate  the  variable  data  until  a 
match  is  made  by  one  of  the  SUBCONTEXTs.  This  mechanism  is 
applicable,  for  example,  to  TLCF  message  texts. 

AUD  Audit  subsystem  entry  (1)  /no  audit  required  (0).  This 
bit  signifies  that  an  audit  trail  event  is  required  because 
the  user  just  entered  another  WWMCCS  subsystem.  The  sub¬ 
system  entered  is  specified  in  field  GSYSX  (see  below). 

GFUNX  This  entry  indexes  a  function  in  FSMGP  which  will  generate  the 

appropriate  simulated  user  input  required  to  place  FSMGP  (and  the 
WES  user)  back  to  the  "pop-up"  level  as  specified  in  field 
GPOPTR .  Different  sequences  are  required  for  different  subsys¬ 

tems. 

GSYSX  This  field  specifies  which  subsystem  the  CONTEXT  is  concerned 

with.  It  will  be  filled  with  an  index  that  identifies  the  sub¬ 
system  name.  See  Table  3-2  for  subsystem  names  and  their  values. 


SU8C0NTEXT  Field  Descriptions 


GSTRP  This  field  is  an  offset  into  the  GTEXT  data  structure  which 
specifies  the  string  to  be  searched  against  for  this  particular 
SUBCONTEXT.  The  SUB  bit  field  in  GSUBFL  controls  how  this  search 
is  performed. 

GNEXT  This  field  is  an  offset  into  GCONT  specifying  the  next  valid  CON¬ 
TEXT  to  transfer  to  if  this  SUBCONTEXT  satisfies  the  given  user 
input/system  output. 

GSFX  This  field  indexes  a  function  in  FSMGP  and  indicates  that  a 

special  function  is  required  to  validate  user  input  parameters  or 
to  modify  system  output. 

GSUBFL  This  field  contains  a  set  of  bit  flags  which  represent  various 
conditions  of  this  particular  SUBCONTEXT.  The  following  bits  are 
defined: 

FX  Fixed  data  (1)  /  Variable  data  CO).  This  bit  in  conjunc¬ 
tion  with  the  SUB  bit  indicates  the  type  of  match  algorithm 
to  use.  Fixed  data  (whether  user  input  or  system  output) 
has  two  cases:  substring  and  no  substring.  Fixed,  no  sub¬ 
string  matching  is  perhaps  the  easiest  to  comprehend  since 
it  involves  a  character-by-character  comparison  between  the 
input  data  and  the  text  string  in  GTEXT.  Fixed,  substring 

i 

on  the  other  hand  utilizes  two  additional  values  (GST ART  \ 

1 

and  GLENG)  to  define  a  window,  or  substring,  within  the 
GTEXT  text  string  to  match  against.  This  window  is  com¬ 
pared  against  the  input  data  and  if  a  match  occurs,  the 
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GTEXT  string  is  written  to  the  user,  not  the  input  data. 
If  this  bit  is  not  set  (i.e.  variable),  again  there  are  two 
cases  to  consider:  substring  and  no  substring.  Variable, 
substring  is  very  similar  to  fixed,  substring  with  the 
exception  that  the  text  string  in  GTEXT  is  not  further 
defined  and  is  assumed  to  be  the  substring  with  which  to 
match.  Variable,  no  substring  (otherwise  known  as  a  "null 
subcontext")  is  a  wildcard  and  will  match  any  input  data. 
If  the  screen  mode  is  normal,  fixed  data  is  a  candidate  for 
automatic  screening  by  FSMGP,  while  variable  data  must  be 
visually  inspected  by  the  Screener. 

SUB  Input  data  requires  Substring  match  (1)  /  no  substring 

match  (0).  Used  in  conjunction  with  the  FX  bit,  see 

* 

description  given  above. 

FUNC  This  bit  signifies  that  sa  special  function  is  required  (1) 
/  function  not  required  (0).  Field  GSFX  contains  the  index 
of  the  special  function  if  this  bit  is  set. 

VAL  This  bit  signifies  that  a  user's  matched  input  is  invalid 

(1)  /  matched  input  is  valid  (0).  This  provides  a  finer 

granularity  on  the  filtering  of  user  input. 

USI  This  bit  signifies  the  subcontext  as  user  input  (1)  /  sys¬ 
tem  output  (0).  It  is  used  only  if  the  BOTH  bit  flag  in 

the  CONTEXT  header  is  set. 


BEG  This  bit  signifies  that  the  halting  delimiter  for  the  sub¬ 
context  is  the  beginning  of  the  next  subcontext  (1)  /  the 


end  of  the  current  subcontext  (0).  Since  system  output 
strings  may  terminate  with  unmatchable  variable  data,  a 
given  halting  delimiter  may  apply  to  the  beginning  of  the 
string  expected  next. 

GSTART  This  field  is  a  byte  offset  into  a  fixed  system  output  at  which 
to  begin  the  subcontext  match.  This  field  is  relevant  for  fixed, 
substring  system  outputs  only. 

GLENG  This  field  specifies  the  length  of  the  system  output  to  be 
matched.  It  is  used  in  conjunction  with  GST ART  to  make  an  exact 

match  on  the  substring  at  the  specified  location  within  the  sys¬ 
tem  output.  This  field,  like  GST ART,  is  relevant  for  fixed,  sub¬ 
string  system  outputs  only. 

3. 1.1. 2. 1.2  GTEXT  (Global  Text  File).  This  structure  contains  the 
actual  text  strings  of  user  input  and  system  output.  These  text  strings 
are  used  by  FSMGP  when  it  is  identifying  the  user/system  context.  When 
FSMGP  has  obtained  a  user  input  or  system  output,  it  must  identify  it  to 
recognize  the  user's  place  in  the  particular  WWMCCS  subsystem.  This  is 
accomplished  by  comparing  the  system  output  or  user  input  with  a  subcon¬ 
text  string.  Strings  in  GTEXT  are  referenced  by  the  GSTRP  field  in  the 
SUBCONTEXT  item.  GTEXT  is  thus  simply  a  concatenation  of  all  possible 
user  Input/system  output  strings  in  one  file,  each  terminated  by  a  null 
character.  When  a  particular  SUBCONTEXT  is  checked  to  see  if  it  matches 
a  particular  system  output  or  user  input,  the  SUBCONTEXT  field  GSTRP 
points  to  the  appropriate  string  to  match.  FSMGP  then  obtains  that 
string  and  makes  a  comparison. 
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3. 1.1 .2. 1.3  6HDEL  (Global  Halting  Delimiter  File).  This  structure  con¬ 
tains  all  the  character  strings  required  by  FSMGP  to  determine  when  it 
has  accumulated  enough  system  output  or  user  input  to  satisfy  a  particu¬ 
lar  CONTEXT.  These  delimiter  strings  are  arranged  in  sets,  since  the 
SUBCONTEXTS  of  a  given  CONTEXT  may  be  terminated  differently.  Each  del¬ 
imiter  string  in  the  file  is  terminated  by  a  null  character,  and  the 
final  string  in  each  set  of  delimiter  strings  is  terminated  by  two  null 
characters.  This  allows  FSMGP  to  know  when  it  has  reached  the  end  of  a 
particular  set. 

FSMGP  must  read  system  output  and  user  input,  but  in  order  for  it  to  know 
when  enough  data  has  been  read  (and  therefore  to  stop)  it  must  be  aware 
of  the  possible  terminating  sequences  of  any  given  CONTEXT.  GHDEL  provi¬ 
des  this  information.  After  a  new  CONTEXT  is  established  by  FSMGP  (poin- 

* 

ted  to  by  the  old  one),  it  must  read  data  (system  or  user)  to  find  a 
match  to  one  of  the  particular  SUBCONTEXT  strings  in  the  current  CONTEXT. 
A  read  will  continue  until  one  of  the  delimiter  strings  is  found  (or  an 
error  occurs).  The  particular  string  set  that  FSMGP  searches  against  is 
pointed  to  by  the  GDLIMP  field  in  the  current  CONTEXT'S  HEADER. 

3. 1.1. 2.1. A  GDOWN  (Global  Downgrade  File).  This  structure  contains  the 
text  of  the  system  output  that  is  to  be  examined  by  the  Screener.  It  is 
created  by  FSMGP  and  written  to  each  time  a  downgrade  is  required.  When 
a  system  output  is  recognized  as  requiring  screening  (either  because  it 
is  variable  data  or  because  the  current  screen  mode  is  set  for  all  data 
to  be  screened),  FSMGP  sends  an  IPC  message  to  SCTP  requesting  a  down- 


grade.  In  this  message  is  the  pathname  of  the  user's  GDOWN  (uniquely 
identified  by  user)  which  SCTP  displays  to  the  Screener  to  accept  or 
reject. 

3. 1.1. 2. 1.5  GINFO  (Global  Downgrade  Context  File).  This  structure  con¬ 
tains  the  latest  user/system  interactions  so  that  the  Screener  may  make 
his  downgrade  decision  in  concert  with  the  current  user/system  dialog. 
It  contains  recent  user  input  and  system  output  text  strings  in  the  order 
of  their  occurrence.  Whenever  a  downgrade  is  required  FSMGP  writes  the 
data  from  the  Downgrade  Context  (GINFO)  Buffer  to  this  file.  The 
Screener  may  peruse  this  file  if  he/she  desires. 

3. 1.1. 2. 1.6  Global  Logon  File  (GLF).  The  Global  Logon  File  is  esta¬ 
blished  at  system  generation  time  and  contains  one  record  for  each  FSM 
user.  The  record  contains  user  identification  (in  the  form  of  FSM  logon 
name)  and  bit-flags  denoting  if  the  user  is  a  Screener,  an  EM  or  a  WES 
user  and  if  the  user  is  currently  logged  on.  A  user's  FSM  user  ID  is 
obtained  by  noting  the  location  of  the  user's  record  in  the  file.  For 
example,  the  user  described  by  record  14  has  a  FSM  user  ID  of  14.  In 
this  way,  the  normal  UNIX  user  ID  is  not  used.  Since  the  FSM  user  ID  is 
a  one-byte  quantity,  GLF  must  contains  no  more  than  127  records  (the 
zeroth  record  is  not  used).  This  file  will  be  updated  by  the  Guardian 
Process  (FSMGP),  FSM  Assignment  Daemon  (FASSD),  Environment  Manager  Pro¬ 
cess  (EMP),  Screener  Trusted  Process  (SCTP)  and  by  a  stand-alone  program 
USER  (see  Appendix  E).  In  light  of  the  number  of  potential  writers,  GLF 
has  an  associated  lock  file  ("/fsm/glf-lock")  which  must  be  created  prior 


to  writing.  When  a  user  logs  onto  the  FSM,  the  user's  process  (whether 
EMP,  SCTP  or  FSMGP)  checks  this  file  for  a  record  containing  the  user's 
name.  If  there  is  no  match  found  or  a  match  is  made  and  either  the 
DEFINED  bit  is  not  set  or  the  user-type  bit  (DHI-EM,  Drtl-SCR  or  DLO-USR) 
is  not  proper,  the  user  cannot  proceed  and  his  process  is  terminated.  If 
a  record  is  found  and  all  bit  settings  are  correct,  the  user's  process 
marks  the  record  active  by  setting  the  DLOGDON  bit  to  one.  When  a 
Screener  or  WES  user  logs  off  FSM,  FASSD  is  notified  and  resets  the 
user's  terminal  ID  to  zero  and  marks  the  record  inactive  by  setting  the 
DLOGDON  bit  to  zero.  EM  logoff  is  taken  care  of  by  the  EMP.  whenever 
FASSD  makes  a  WES  user/Screener  assignment,  the  WES  user's  record  is 
modified  to  contain  the  assigned  Screener's  FSM  user  ID.  Finally,  when 
the  EM  manually  reassigns  a  WES  user  to  a  Screener,  FASSD  modifies  GLF. 
EMP  reads  this  file  when  processing  its  commands.  See  Figure  3-6  for  a 
record  layout  of  the  GLF  file.  The  corresponding  fields  are  described 
be  low: 

LFLAG  A  collection  of  bit  flags  that  have  the  following  meanings: 

DEFINED  This  bit  signifies  that  the  user  which  this  record 
describes  is  a  valid  FSM  user.  In  this  way,  records  are 
never  removed  from  GLF  (thus  altering  a  user's  FSM  user 
ID),  but  are  marked  as  not-DEFINED,  when  a  user  is 
deleted  from  FSM  participation. 
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Figure  3-6.  A  GLF  Record 
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DLOGDON  This  bit  signifies  that  this  user  is  currently  logged 


onto  FSM.  During  logon,  this  bit  is  checked  and  set  by 
the  user's  process  (EMP,  SCTP  or  FSMGP).  During  logoff, 
FASSD  resets  the  bit  for  WES  users  and  Fcreeners,  while 
EMP  resets  it  for  the  EM.  Its  purpose  is  to  prevent 
users  with  the  same  name  from  being  logged  on  simul¬ 
taneously. 

DHI-EM  This  bit  indicates  that  this  GLF  record  describes  a 

"high-side"  Environment  Manager.  Only  one  record  should 
be  marked  as  an  EM. 

DHI-SCR  This  bit  indicates  that  this  GLF  record  describes  a 

"high-side"  Screener. 

DLO-USR  This  bit  indicates  that  this  GLF  record  describes  a 

"low-side"  WES  user. 

LUSRID  The  FSM  user  ID  of  this  WES  user's  currently  assigned  Screener. 

If  there  is  no  Screener  currently  assigned,  the  field  will  be 
zero.  This  field  is  undefined  (not  used)  for  Screener  and  EM 
records. 

LTTYID  The  UNIX  identifier  of  the  terminal  this  user  is  logged  onto  or 
zero  if  the  user  is  not  logged  on. 

LUSRNAM  The  eight-byte  UNIX  logon  name  of  this  Screener  or  EM;  or  the 
twelve-byte  WWMCCS  user  ID  of  this  WES  user. 


3. 1.1 .2. 1.7  Global  Logon  File  Lock  (GLF-LOCK).  Because  FSMGP,  FASSD, 
SCTP,  EMP  and  USER  all  modify  the  Global  Logon  File  (GLF),  the  standard 
lock  mechanism  is  used  during  writes  to  GLF.  The  existence  of  the  lock 
file  indicates  that  a  process  is  currently  updating  GLF.  The  lock  file 
has  no  records,  it  is  merely  an  entry  in  the  /fsm  directory  so  that  its 
presence  or  absence  may  be  easily  checked. 

3. 1.1.2. 1.8  System  Global  Environment  (GENV)  File.  Established  at  FSM 
initialization  is  the  System  Global  Environment  File.  When  a  WES  user 
logs  onto  FSM,  he  is  given  a  copy  of  the  system  default  values.  Subse¬ 
quent  changes  in  the  environment  can  be  made  by  either  the  EMP,  at  the 
behest  of  the  EM,  or  by  the  FSMGP,  following  detection  of  bandwidth  over¬ 
flow.  The  file  contains  one  record  with  values  which  indicate  bandwidth 
threshold  and  subsystem  screen  modes.  Updates  occur  when  the  EM,  via  the 
EMP,  modifies  system-wide  or  user-specific  environment  values.  See 
Figure  3-7  for  a  GENV  record  layout.  The  corresponding  fields  are 
described  below: 

UANDW  The  bandwidth  threshold.  Indicates  number  of  messages  per  minute 
which  are  allowed  to  be  automatically  downgraded. 

ACCSM  The  ACCESS  subsystem  screen  mode.  A  screen  mode  has  one  of  three 
discrete  values:  OFF  (no  screening  is  done),  NORMAL  (FSMGP  deter¬ 
mines  what  system  outputs  need  to  be  sent  to  the  Screener  for 


manual  downgrading)  or  ALL  (all  output  is  manually  screened). 

LSTSM  The  LIST  subsystem  screen  mode.  Screen  mode  can  be  OFF  (0),  NOR- 


SIOSM  The  SIOS  subsystem  screen  mode.  Screen  mode  can  be  OFF  (0),  NOR¬ 


MAL  (1)  or  ALL  (2). 

TCNSM  The  TCON  subsystem  screen  mode.  Screen  mode  can  be  OFF  (0),  NOR¬ 
MAL  Cl)  or  ALL  (2). 

TLCSM  The  TLCF  subsystem  screen  mode.  Screen  mode  can  be  OFF  (0),  NOR¬ 
MAL  (1)  or  ALL  (2). 

TSSSM  The  TSS  subsystem  screen  mode.  Screen  mode  can  be  OFF  (0),  NORMAL 
(1)  or  ALL  (2). 

tfOMSM  The  WUOMS  subsystem  screen  mode.  Screen  mode  can  be  OFF  (0),  NOR¬ 
MAL  (1)  or  ALL  (2) . 

3. 1.1. 2. 1.9  User  Global  Environment  (GENV)  File.  Associated  with  every 
logged-on  WES  user  is  a  GENV  file  which  contains  environment  values  for 
the  specific  user.  The  file  is  created  when  the  user  logs  onto  FSM.  The 
user's  FSMGP  copies  the  system  GENV  into  the  user's  GENV.  The  file  is 
contained  in  the  user's  directory  ("/fsm/usr/user-i") .  The  file  is  modi¬ 
fied,  when  environment  values  change,  by  FSMGP.  The  format  of  the  file 
follows  the  system  GENV  exactly  (refer  to  Figure  3-7).  FSMGP  modifies 
this  file  when  the  EM  makes  environment  changes  pertinent  to  this  WES 
user  and  when  bandrate  overflow  has  been  detected.  EMP  reads  this  file 
when  displaying  a  current  WES  user's  environment  to  the  EM. 

3.1.1.2.1.10  Global  Profile  (GPROF)  File.  Associated  with  each  WES  user 
is  a  user  profile  file.  This  file  is  created  and  updated  by  the  user's 
FSMGP.  The  file  contains  only  one  record  which  identifies  the  user  (with 
FSM  user  ID  and  UNIX  terminal  ID),  indicates  the  current  WWMCCS  subsys- 


tern,  user's  status  and  the  Date-Time  Group  (DTG)  of  the  status.  Status 
in  this  sense  refers  to  potential  delays.  There  are  six  conditions  that 
can  cause  delay: 

.  waiting  on  user  input 
.  waiting  on  system  output 
.  waiting  for  Screener  response 

.  waiting  on  polling  text  (user  input  or  system  output) 

.  waiting  on  Screener  assignment 
.  waiting  for  RNPE  connection 

Each  time  the  WES  user's  delay  state  changes,  FSMGP  updates  the  user's 

GPROF  file.  This  file  is  read  by  ErtP  whenever  the  EM  requests  a  user 

profile.  See  Figure  3-8  for  a  GPROF  record. 

* 

Each  record  has  the  following  fields: 

PUSR  The  one-byte  FSM  user  ID. 

PTTY  The  UNIX  terminal  ID. 

PSUB  The  WWMCCS  subsystem  in  use  at  the  time  the  status  was  recorded. 

PSTAT  The  user's  status.  Values  are  0  (waiting  on  user  input),  1 

(waiting  on  system  output),  2  (waiting  on  Screener  response),  3 
(waiting  on  polling  text),  4  (waiting  on  Screener  assignment)  and 
5  (waiting  on  RNPE /Honeywell  H6000  connection). 

PDTG  The  four-byte  DTG  of  the  status. 


3.1.1.2.1.11  Global  Audit  Description  (GAUD)  File.  In  order  for  ATDP  to 


know  quickly  what  audit  files  are  present,  in  addition  to  the  total  time 
range  they  cover,  a  file  exists  which  contains  all  audit  file-pairs  (one 
entry  per  pair),  including  the  current  pair,  their  DTG  of  creation  and 
DTG  of  last  entry.  Each  time  FAD  logs  an  audit  event  in  the  current 
file-pair,  it  must  also  update  the  corresponding  GAUD  record  with  the  new 
"last  entry"  DTG.  Since  the  description  record  (in  GAUD)  for  the  current 
file-pair  is  always  the  last  record  in  the  file,  FAD  has  no  problem  upda¬ 
ting  it. 

The  description  file  contains  fixed-length  sequential  records;  one  record 
per  audit  file-pair.  Each  record  follows  this  format: 

AUDFN  Audit  file-pair  name  (14  bytes). 

CRET  Date-time  group  of  creation  (4  bytes). 

LMOD  Date-time  group  of  last  entry  (4  bytes). 

In  addition  to  FAD,  the  description  file  is  also  updated  by  ATDP.  When 
ATDP  saves  the  current  file-pair,  it  modifies  the  description  record  of 
the  current  file-pair  by  changing  the  filename  from  "current"  to  the  DTG 
of  the  save.  It  also  writes  a  new  record  with  a  filename  of  "current" 
and  the  DTG  of  creation.  Notice,  ATDP  does  NOT  modify  the  DTG  of  last 
entry  on  the  old  current  file.  This  data  is  only  modified  by  FAD.  Simi¬ 
larly,  FAD  never  modifies  the  filename  or  the  DTG  of  creation.  Since 
both  FAD  and  ATDP  have  write-access  to  this  file,  it  must  be  locked 
oefore  writing.  See  Figure  3-9  for  a  GAUD  record. 


I 


a  standard  lock-for-writing  mechanism.  The  mechanism  involves  requiring 
all  writing  processes  to  lock  the  file  before  writing  and  unlocking  it 
after.  The  existence  of  the  lock  file  signifies  a  process  is  currently 
updating  an  audit  file.  The  two  file  sets  which  are  of  concern  are  the 
Current  Audit  File-Pair  and  the  GAUD  file.  Both  are  updated  by  ATDP  and 
FAD .  The  lock  file  has  no  records,  it  is  merely  an  entry  in  the  audit 
directory  so  that  its  presence  or  absence  can  be  detected  easily. 


3.1.1.2.1.13  Current  Global  Audit  Event  (GAEV)  Files.  The  Global  Audit 
Event  Files  are  pairs  of  sequential  files  which  contain  records  of 
varying  format  and  length.  All  audit  events  are  written  to  the  GAEV 
files.  These  events  can  be  generated  by  any  one  of  the  four  FSM  pro¬ 
cesses:  FSM  Guardian  Process  (FSMGP),  Environment  Manager  Process  (EMP), 
Screener  Trusted  Process  (SCTP)  or  FSM  Assignment  Daemon  (FASSD) .  Audit 
events  are  actually  audited  (written  to  the  GAEV  files)  by  the  FSM  Audit 
Daemon  (FAD).  User-oriented  formatting  and  display  of  GAEV  records  is 
performed  by  the  Audit  Trail  Display  Program  (ATDP). 
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There  are  nineteen  events  logged  by  FAD 


Event  Code 


Event  Description 


User  input  sent  to  system  (WWMCCS) 
User  input  not  sent  to  system 


System  output  matched  and  sent  to  user 

System  output  not  matched 

System  output  accepted  by  Screener 

System  output  rejected  by  Screener 

Screener  logged  onto  FSM 

Screener  logged  off  FSM 

User  logged  onto  FSM 

User  logged  off  FSM 

User  initiated  a  WWMCCS  subsystem 

User  assigned  to  Screener 

User  input  simulated  (resynch) 


Screen  mode  modified 


Bandwidth  threshold  modified 


EM  logged  onto  FSM 


EM  logged  off  FSM 

System  output  received  from  WWMCCS 

Screener  begins  downgrade  request 


The  GAEV  file-pair  consist  of  two  files:  the  Event  file  and  the  Text 
file.  Every  audit  event  causes  a  record  to  be  written  to  the  Event  file. 
Additionally,  some  audit  events  will  write  ASCII  strings  to  the  Text 
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file.  All  auditable  user  input  and  system  output  will  be  written  to  the 


Text  file  with  the  appropriate  offset  and  length  entered  with  the 


corresponding  Event  file  record.  For  example,  consider  audit  event  01 


(User  input  sent  to  system).  This  event  causes  a  record  to  be  written  in 


the  Event  file  containing  useful  data  (user  ID,  DTG  and  so  on),  as  well 


as  the  offset  in  the  Text  file  where  the  user  input  can  be  found  and  its 


length.  The  motivation  behind  two  files,  as  opposed  to  one,  stems  from 


the  potential  size  of  user  inputs  and  system  outputs;  as  well  as  the  fact 


that  not  all  audit  events  have  text  to  audit. 


All  of  the  following  event  records  are  written  to  the  Event  file.  Also, 


the  following  descriptions  pertain  onty  to  the  Event  file,  NOT  the  Text 


file.  Records  in  the  Text  file  are  format-less;  that  is,  they  are 


variable-length  ASCII  strings. 


Each  audit  event  record  contains  a  fixed-size  header  block  followed  by  a 


variable  length  Event  Description.  Figure  3-10  illustrates  an  audit 


event  record. 


The  header  is  the  same  for  all  audit  events  and  contains  these  fields: 


FEVENT  The  Event  Code  (01-19) 


FEVSIZ  The  number  of  bytes  in  the  Event  Description.  NOTE:  This  does 


not  include  the  size  of  the  header. 


FEVTIfl  The  Date-Time  Group  (DTG)  of  this  event  in  standard  UNIX  two 


integer  (four  bytes)  format. 


Figure  3-11  is  an  Event  file  Record  Header  Description. 
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The  following  paragraphs  provide  a  description  of  the  content  and  format 
of  the  audit  event  record  for  each  of  the  nineteen  events  recorded  in  the 
GAEV  files. 

EVENT  01  (User  input  sent  to  system) 

FSNGP  will  generate  this  audit  event  whenever  the  FSM  has  recognized  and 
allowed  user  input  to  be  sent  to  a  WWMCCS  subsystem.  The  user  input  will 
be  copied  to  the  Text  file  with  the  text  file  offset  and  text  length 
entered  in  the  Event  file.  Figure  3-12  is  an  Event  01  record  description 
to  be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  from  which  the  input  was 
sent. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  See  Table  3-2  for  the 
OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 
user  input  is  written. 


LENGTH  The  byte  length  of  the  user  input. 
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Figure  3-12.  Description  of  Event  01,  03,  04  ,  13  and  18  Records 
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Table  3-2.  WWMCCS  Subsystems  and  their  FSM  codes 
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Subsystem  Code 


WWMCCS  Subsystem 


ALL  subsystems 


ACCESS 


SIOS  (Standard  Input/Output  System) 


TCON  (Transaction  Constructor) 


TLCF  (Teleconferencing) 
TSS  (Timesharing  System) 


WWDMS  (World-Wide  Data  Management  System) 


Logon 


EVENT  02  (User  input  not  sent  to  system) 


Whenever  FSMGP  cannot  recognize  the  user  input  or  the  user  attempts  to 
use  a  privileged  WWMCCS  facility  that  is  not  allowed,  FSMGP  will  generate 
this  audit  event.  The  user  input  will  be  written  to  the  Text  file. 
Figure  3-13  is  an  Event  02  record  description  to  be  written  to  the  Event 
fi  le. 


Field  Descriptions 


USERID  The  one  byte  FSM  user  ID. 
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USRTTY  The  UNIX  identifier  of  the  terminal  from  which  the  input  was 

sent. 

SUBSYS  The  current  WWHCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 

FAILEX  The  coded  reason  why  the  input  was  not  sent.  Codes  are:  1=No 

match  (unrecognizable  input)  and  2=Match  but  disallowed. 

OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 

user  input  can  be  found. 

LENGTH  The  byte  length  of  the  user  input. 

EVENT  03  (System  output  matched  and  sent  to  user) 

Whenever  system  output  is  matched  (recognized)  by  the  FSMGP  and  sent  to 

the  user,  thereby  bypassing  the  Screener,  FSMGP  generates  this  audit 

event.  The  system  output  is  written  to  the  Text  file.  Refer  to  Figure 

3-12  for  an  Event  03  record  description  to  be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  to  which  the  output  was  sent. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 

OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 
system  output  was  written. 


LENGTH  The  byte  length  of  the  system  output. 


EVENT  U4  (System  output  not  matched) 


In  the  course  of  a  system-user  dialogue/  whenever  the  system  responds 
with  unrecognizable  output/  FSMGP  will  generate  this  audit  event.  The 
system  output  will  be  written  to  the  Text  file.  Refer  to  Figure  3-12  for 
an  Event  04  record  description  to  be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  to  which  the  output  would 
have  been  sent. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 

OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 
system  output  was  written. 

LENGTH  The  byte  length  of  the  system  output. 

EVENT  05  (System  output  accepted  by  the  Screener) 

when  a  WWMCCS  subsystem  returns  output  which  must  be  visually  inspected 
by  a  Screener  for  downgrading  and  the  output  was  accepted  for  downgra¬ 
ding/  FSMGP  generates  this  audit  event.  The  accepted  system  output  is 
written  to  the  Text  file.  See  Figure  3-14  for  an  Event  05  record 
description  to  be  written  to  the  Event  file. 


Field  Descriptions 
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USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  to  which  the  accepted  output 
was  sent. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 

SCRID  The  one  byte  FSM  user  ID  of  the  Screener. 

OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 
system  output  is  written. 

LENGTH  The  byte  length  of  the  accepted  system  output. 


EVENT  06  (System  output  rejected  by  Screener) 


In  this  case,  a  WWMCCS  subsystem  output  was  visually  inspected  by  a 
Screener  and  the  downgrade  request  was  refused.  FSMGP  will  be  notified 
of  the  downgrade  rejection  and  will  then  generate  this  audit  event.  The 
rejected  system  output  is  written  to  the  Text  file.  Refer  to  Figure  3-14 
for  an  Event  06  record  description  to  be  written  to  the  Event  file. 


Field  Descriptions 


USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  to  which  the  output  was  to  be 
sent. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 
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SCRID  The  one  byte  FSM  user  ID  of  the  Screener. 

OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 
rejected  system  output  is  written. 

LENGTH  The  byte  length  of  the  rejected  system  output. 

EVENT  07  (Screener  logon  to  FSM) 

Whenever  a  Screener  logs  onto  the  FSM  (through  a  new  instance  of  SCTP), 
SCTP  will  generate  this  audit  event.  See  Figure  3-15  for  an  Event  07 
record  description  to  be  written  to  the  Event  file. 

Field  Descriptions 

SCRID  The  one  byte  FSM  user  ID  of  the  Screener. 

SCRTTY  The  UNIX  identifier  of  the  Screener  terminal  logging  on. 

EVENT  08  (Screener  logoff  of  FSM) 

When  a  Screener  logs  off  of  the  FSM,  FASSD  will  generate  this  audit 
event.  Refer  to  Figure  3-15  for  an  Event  08  record  description  to  be 
written  to  the  Event  file. 

Field  Descriptions 

SCRID  The  one  byte  FSM  user  ID  of  the  Screener. 

SCRTTY  The  UNIX  identifier  of  the  Screener  terminal  logging  off. 
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EVENT  09  (User  Logon  to  FSM) 


When  a  WES  user  begins  a  terminal  session  (which  includes  logon  sequence) 
FSMGP  will  generate  this  audit  event.  See  Figure  3-16  for  an  Event  09 
record  description  to  be  written  to  the  Event  file. 


Field  Descriptions 


USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  user  terminal  logging  on. 

NOTE:  A  user  who  fails  the  initial  logon  sequence  may  not  have  any  audit 
events  generated. 


EVENT  10  (User  logoff  of  FSM) 


when  a  WES  user  ends  a  terminal  session,  FASSD  will  generate  this  audit 
event.  This  event  involves  two  cases:  explicit  user  logoff  and  user 
logoff  due  to  error  conditions.  Refer  to  Figure  3-16  for  an  Event  10 
record  description  to  be  written  to  the  Event  file. 


Field  Descriptions 


USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  logging  off. 
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Figure  3-16.  Description  of  Event  09  and  10  Records 


EVENT  11  (User  initiates  a  WWMCCS  subsystem) 

When  a  user  initiates  a  WWMCCS  subsystem,  FSMGP  will  generate  this  audit 
event.  A  WWMCCS  subsystem  can  be  initiated  in  response  to  the  "SYSTEM  ?" 
prompt  or  at  other  less  well-defined  times.  For  instance,  if  the  user  is 
currently  using  the  TCON  subsystem,  he  can  invoke  the  LIST  subsystem  at 
any  time.  NOTE:  Logon  is  not  considered  a  valid  WWMCCS  subsystem  for 
this  event.  See  Figure  3-17  for  an  Event  11  record  description  to  be 
written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  initiating  a  WWMCCS  subsys¬ 
tem. 

SUBSYS  The  initiated  subsystem  code.  Refer  to  Table  3-2  for  code 

explanations. 

STATUS  The  status  of  the  initiation  attempt  (Q=Failure,  1=Success). 
Note:  If  STATU S=0,  SUBSYS  will  be  undefined. 
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Figure  3-17.  Description  of  Event  11  Record 


EVENT  12  (User  assigned  to  Screener) 

Whenever  the  FASSD  makes  an  initial  WES  user/Screener  assignment  or  the 
EM  (via  the  EMP)  reasssigns  a  WES  user  to  a  Screener,  FASSO  generates 
this  audit  event.  See  Figure  3-18  for  an  Event  12  record  description  to 
be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID  of  the  assigned  user. 

USRTTY  The  UNIX  identifier  of  the  assigned  user  terminal. 

SCRID  The  one  byte  FSM  user  ID  of  the  assigned  Screener. 

SCRTTY  The  UNIX  identifier  of  the  assigned  Screener  terminal. 
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EVENT  13  (User  input  simulated) 

when  the  FSMGP  receives  system  output  that  is  unrecognizable,  FSMGP  will 
simulate  user  input  to  the  WWMCCS  subsystem  in  use  in  order  for  FSMGP  to 
keep  from  getting  lost  in  the  context  tables.  This  usually  involves 
"popping  up"  to  the  next  higher  level  within  WWMCCS.  This  could  ter¬ 
minate  the  current  subsystem  (thus,  returning  the  user  to  the  "SYSTEM?" 
prompt)  or  return  to  a  well-defined  point  within  the  current  subsystem 
(eg.  the  "NEXT?"  prompt  in  TCON).  The  simulated  user  input  is  written  to 
the  Text  file.  Refer  to  Figure  3-12  for  an  Event  13  record  description 
to  be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID. 

USRTTY  The  UNIX  identifier  of  the  terminal  from  which  input  is  being 
simulated. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 

OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 
simulated  user  input  is  written. 

LENGTH  The  byte  length  of  the  simulated  user  input. 

EVENT  14  (Screen  mode  modified) 

when  the  EM  (via  the  EMP)  modifies  the  downgrade  screening  mode,  EMP  gen¬ 
erates  this  audit  event;  or  if  a  WES  user's  FSMGP  detects  that  the  user's 


bandwidth  threshold  has  been  exceeded,  FSMGP  modifies  the  user's  screen 
mode  (to  ALL)  and  generates  this  event.  Screen  mode  may  be  set  to  any 
one  of  three  values: 


NONE  no  output  is  inspected  by  the  Screener. 

NORMAL  Only  output  FSMGP  cannot  match  is  inspected  by  the  Screener. 

ALL  All  output  is  inspected  by  the  Screener. 

Additionally,  the  screen  mode  may  be  set  for  a  user,  for  a  subsystem  or 

for  a  user/ subsystem.  See  Figure  3-19  for  an  Event  14  record  description 

to  be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID.  If  ALL  users  are  affected,  this  value 
will  be  set  to  -1 . 

USRTTY  The  UNIX  identifier  of  the  user's  terminal.  This  value  is  unde¬ 
fined  if  USERID  is  -1  . 

SUBSYS  The  WWMCCS  subsystem(s)  for  which  the  screen  mode  was  modified. 

Refer  to  Table  3-2  for  code  explanations.  The  logon  subsystem  is 
not  affected  by  the  screening  mode. 

SCMODE  The  new  screen  mode  <0=N0NE,  1=N0RMAL  and  2=ALL). 
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Figure  3-19.  Description  of  Event  14  Record 


EVENT  15  (Bandwidth  Threshold  modified) 

When  the  EM  (via  the  EMP)  modifies  the  bandwidth  threshold  for  a  user/ 
EMP  generates  this  audit  event.  The  bandwidth  threshold  is  defined  as 
the  number  of  messages  allowed  to  be  automatically  downgraded  for  a  user 
each  minute.  If  the  bandwidth  threshold  is  surpassed/  screen  mode  is 
automatically  modified  to  ALL  for  the  particular  user  (by  FSMGP).  See 
Figure  3-20  for  an  Event  15  record  to  be  written  to  the  Event  file. 

Field  Descriptions 

USERID  The  one  byte  FSM  user  ID.  If  ALL  users  are  affected,  this  value 
wi ll  be  -1 . 

RATE  The  number  of  messages  per  minute  which  may  automatically  bypass 
the  Screener.  The  rate  must  be  a  positive  integer  in  the  range 
of  one  to  127. 

EVENT  16  (EM  logon  to  FSM) 

When  the  EM  logs  onto  FSM,  EMP  generates  this  audit  event.  See  Figure 
3-21  for  an  Event  16  record  to  be  written  to  the  Event  file. 

Field  Descriptions 

EMID  The  one  byte  FSM  user  ID  of  the  Environment  Manager. 

EMTTY  The  UNIX  identifier  of  the  EM's  terminal. 
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Figure  3-20.  Description  of  Event  15  Record 
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EVENT  17  (EM  Logoff  of  FSM) 


When  the  EM  Logs  off  of  FSfl,  EMP  generates  this  audit  event.  See  Figure 


3-21  for  an  Event  17  record  to  be  written  to  the  Event  fiLe. 


FieLd  Descriptions 


EMID  The  one  byte  FSM  user  ID  of  the  Environment  Manager. 


EMTTY  The  UNIX  identifier  of  the  EM's  terminaL. 


EVENT  18  (System  output  received  by  FSMGP) 


when  FSM6P  receives  a  system  output  from  WWMCCS,  via  the  RNPE,  and  has 


matched  a  halting  delimiter  (the  output  may  or  may  not  subsequently  match 


a  SUBCONTEXT ) ,  this  event  is  generated.  The  system  output  received  is 


written  to  the  Text  file.  Refer  to  Figure  3-12  for  an  Event  18  record 


description. 


Field  Descriptions 


USERID  The  one  byte  FSM  user  ID  of  the  user. 


USRTTY  The  UNIX  identifier  of  the  user's  terminaL. 


SU8SYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 


explanations. 


OFFSET  The  byte  offset  from  the  beginning  of  the  Text  file  where  the 


system  output  can  be  found. 


LENGTH  The  byte  length  of  the  user  input. 


3-81 


2/4 


AD-A171  122  FORSCOM  SECURITY  MONITOR  (FSM)  COMPUTER  PROGRAM 

DEVELOPMENT  SPECIFICATION  CTVPE  B3HU>  LOCICON  INC  SAN 
DIEGO  CA  FES  81  Ne8ST9-78-C-0T2T 


UNCLASSIFIED 


F/O  9/2 


NL 


EVENT  19  (Downgrade  request  received  by  Screener) 

When  the  Screener  begins  reviewing  a  downgrade  request  from  a  WES  user 
this  event  is  generated  by  SCTP.  The  time  of  this  event  in  conjunction 
with  the  time  of  the  subsequent  event  05  (accept)  or  06  (reject)  yields 
the  time  needed  by  the  Screener  to  make  his  decision.  See  Figure  3-22 
for  an  Event  19  record  description. 

Field  Descriptions 

SCRID  The  one  byte  FSM  user  ID  of  the  Screener. 

SCRTTY  The  UNIX  identifier  of  the  Screener's  terminal. 

SUBSYS  The  current  WWMCCS  subsystem  in  use.  Refer  to  Table  3-2  for  code 
explanations. 

USERID  The  one  byte  FSM  user  ID  of  the  WES  user  requesting  the  down¬ 
grade. 

3.1.1.2.1.14  Current  Audit  Text  File.  When  audit  events  are  logged 
which  contain  audit  text  (system  output  or  user  input),  the  text  is  writ¬ 
ten  in  the  current  audit  text  file.  It  has  no  format.  Text  is  written 
to  the  file,  by  being  appended,  as  ASCII  strings.  The  starting  location 
(OFFSET)  and  LENGTH  of  each  event's  text  is  recorded  with  the  correspon¬ 
ding  event  record  in  the  current  GAEV  file. 


Word  0 

FEVENT 

FEVSI2 

Word  1 

FEVTIM 

— 

- 

Word  2 

Word  3 

SCRID 

SCRTTY 

Word  4 

SUBSYS 

USERID 

Figure  3-22.  Description  of  Event  19  Record 


3.1.1.2.1.15  Saved  Global  Audit  Environment  (GAEV)  Files.  ATDP  can  save 
the  current  audit  file-pair  and  initialize  a  new  pair.  Once  a  file-pair 
has  been  saved/  it  can  be  accessed  only  by  ATDP  and  only  for  reading. 
Therefore/  saved  audit  files  (i.e.  non-current)  need  no  corresponding 
lock  files.  A  saved  audit  file-pair  is  renamed  to  the  DTG  of  the  save 
operation.  For  example/  saving  a  current  file-pair  on  April  2  at 
12:05:30  has  the  effect  of  renaming  the  current  Event  file  from 
"current. e"  to  "04021 20530. e"  and  the  current  Text  file  from  "current. t" 
to  "04021 20530. t".  The  new  current  file-pair  exists  with  the  same  name 
as  before  but  now  with  zero  Length.  NOTE:  Do  not  confuse  the  saved  DTG 
with  the  DTG  of  the  last-entered  audit  event.  Records  in  the  saved  Event 
files  have  formats  as  described  above  in  the  Global  Audit  Event  (GAEV) 
file  description.  Records  in  the  saved  Text  files  are  format-less. 

3.1.1.2.1.16  Saved  Audit  Text  Files.  Saved  audit  text  files  have  no 
format.  They  contain  ASCII  strings  which  were  audit  text.  Associated 
with  each  saved  text  file  is  a  saved  GAEV  file. 

3.1.1.2.1.17  Audit  Request  Files.  After  an  audit  event  has  been  genera¬ 
ted  by  one  of  the  four  primary  FSM  processes/  GFAUDIT  is  called  by  the 
generating  process  and  passed  pertinent  event  data  items.  It  processes 
its  arguments  and  writes  a  file  containing  an  audit  request  into  the 
audit  queue.  The  audit  request  file  contains  all  known  event  data  that 
is  needed  by  FAD  to  log  the  audit  event  into  the  current  audit  files. 
The  file  has  a  name  composed  of  the  Date-Time  Group  (DTG)  of  the  audit 
event/  the  process  ID  of  the  event  generator  (one  of  FSMGP/  EMP/  SCTP  or 


FASSD)  and  a  random  alphanumeric  character.  This  format  guarantees  uni- 
que  filenames  in  the  queue.  Specifically,  the  filename  format  is: 

MMDDhhmmsspppr 

where, 

MM  is  the  month  (01-12) 

00  is  the  day  (01-31) 

hh  is  the  hour  (00-23) 

mm  is  the  minute  (00-59) 

ss  is  the  second  (00-59) 

ppp  is  the  process  ID  of  the  event  generator  (000-999) 
r  is  a  random  alphanumeric  character 

The  audit  request  file  written  by  GFAUDIT  is  composed  of  one  or  more 
records.  The  first  record  of  every  file  will  follow  the  format  of  the 
audit  event  it  represents.  These  follow  the  formats  described  above  in 
the  Global  Audit  Event  (GAEV)  file  description.  If  the  particular  event 
also  contains  text,  in  the  form  of  system  output  or  user  input,  there 
will  be  a  second  and  possibly  additional  records  which  contain  the  text. 
The  text  has  no  format;  that  is,  it  is  composed  of  ASCII  strings  and  is 
guaranteed  to  be  terminated  by  a  UNIX  null  byte  CO'). 

All  audit  request  files  are  written  into  an  audit  request  queue  by  the 
global  audit  function  GFAU0IT.  Audit  request  files  are  processed  (the 
events  are  logged)  by  the  audit  daemon  FAD.  The  audit  request  queue  is 
implemented  as  a  directory  entry  in  the  main  audit  directory  "/fsm/fsat". 


The  queue  pathname  is  "/fsm/fsat/auditq". 

An  empty  audit  queue  directory  (i.e.  no  files)  signifies  that  there  are 
no  pending  audit  requests.  Similarly,  n  files  signifies  n  pending  audit 
requests.  Audit  requests  are  handled  in  a  strict  First-in,  First-out 
(FIFO)  basis  and  are  unlinked  by  FAD  as  the  specified  event  is  recorded 
in  the  current  audit  files. 

3.1.1.2.1.18  Lock-File  sclog-i.  This  lock-file  provides  a  means  for 
SCTP  to  inform  assigned  FSMGPs  that  a  Screener  is  logging  off  or  has  log¬ 
ged  off.  This  prevents  downgrade  requests  from  being  sent  to  logged-off 
Screeners.  Prior  to  requesting  a  downgrade,  FSMGP  checks  for  the 
presence  of  this  lock-file.  If  the  lock-file  is  not  present,  the  down¬ 
grade  request  is  sent  to  the  assigned  Screener.  If  the  port  exists,  the 
downgrade  request  is  deferred  until  a  new  Screener  is  assigned.  In  the 
latter  case,  the  user  is  also  notified  that  no  Screener  is  available. 
The  lock-file  name  consists  of  the  characters  "sclog"  followed  by  the 
Screener's  FSM  user  ID  as  a  five  character  string  with  leading  zeroes. 

3. 1.1 .2. 2  Port  Descriptions.  The  inter-process  communication  (IPO 
ports  used  by  FSM  are  for  the  use  of  FSMGP,  FASSD,  EMP  and  SCTP.  Ports 
are  used  to  pass  IPC  messages  indicating  various  events  applicable  to 
FSM,  such  as  Screener  assignments,  Screener  logon/ logoff  notifications, 
environment  changes,  and  so  on.  Following  are  descriptions  of  the  indi¬ 
vidual  ports  implemented  in  FSM  and  corresponding  message  formats. 


3. 1.1. 2. 2.1  Port  Message  Descriptions.  The  FSrt  port  messages  will  con¬ 
sist  of  structured  data,  both  binary  and  ASCII.  See  Table  3-3  for  a  sum¬ 
mary  of  the  message  types.  Figure  3-23  describes  the  actual  structure  of 
the  message. 

Field  Descriptions 

GMTYP  One  byte  Message  Type. 

GUID  One  byte  FSM  user  ID. 

GECNG  A  one  byte  environmental  change  value  (bypass  rate  or  screen 
mode);  or  a  second  FSM  user  ID. 

GSSI  One  byte  subsystem  index  (refer  to  Table  3-2  for  code  explana¬ 
tions). 

GCLAS  Integer  security  classification  code. 

GDPTH  Pathname  of  a  downgrade  file. 

GCPTH  Pathname  of  a  context  file. 


Table  3-3.  Summary  of  IPC  Messages 


General 


where: 


Format: 

<mtyp>C<uid>H<ecng>C<ssinx>3C<sc><dgfnXctxfn>3 


*  Items  enclosed  in  C3  are  optional. 

*  "mtyp"  represents  the  IPC  message  type  (byte). 

*  "uid"  represents  a  user  ID  (byte). 

*  "ecng"  represents  an  environment  change,  a  bypass  rate 
change  (number  of  messages  per  minute),  a  screen  mode 
change  (0  -  none,  1  -  normal,  2  -  all);  or  a  second 
user  id  (all  values  one  byte). 

*  "ssinx"  represents  a  subsystem  index  for  a  screen  mode 
change  (byte). 

0  -  All  subsystems 


1  -  ACCESS 


7  -  WWOMS 


8  -  Logon 

*  “sc"  represents  the  security  classification  of  the  user  (byte). 

1  -  unclassified 

2  -  confidential 

3  -  offical  use  only 

4  -  secret  working  papers 

5  -  secret 

*  “dgfn"  represents  the  pathname  of  a  file  to  be  downgraded. 

*  "ctxfn"  represents  the  pathname  of  a  context  file  associated 
with  a  downgrade  file. 

1PC  Message  Types  are: 

UAREQ  <uidXecng>  User  assignment  request. 

UALGO  <uid>  User  logoff  notification. 


SCASS  <uidXecng> 


Scresner  assigned 


SCNAV 


Screener  not  available 


SCCNG 

<uid><ecng> 

Screener  assignment  change. 

BRCNG 

<ecng> 

Bypass  rate  change. 

SMCNG 

<ecng><ssinx> 

Screen  mode  change. 

DGREQ 

<uidXecngXscXdgfnXctxfn>  Downgrade  request. 

DGACC 

<uid> 

Downgrade  accepted. 

DGREJ 

<uid> 

Downgrade  rejected. 

ORROT 

<uidXecng> 

Screener  ready  (logon). 

DRLGO 

<uid> 

Screener  logoff  notification. 

3. 1.1. 2. 2. 2  Port  faport.  This  port  provides  a  means  for  a  FSMGP  to 
request  a  Screener  assignment  for  a  newly  logged  on  WES  user.  FSMGP  wri¬ 
tes  a  UAREQ  message  to  FASSD.  FASSD  writes  a  reply  (SCASS  or  SCNAV)  on 
the  appropriate  fsagn-i  port.  SCTP  also  uses  the  faport  to  notify  FASSD 
of  Screener  logons/logof f s  (DRRDY/DRLGO) .  Finally,  EMP  utilizes  this 
port  to  notify  FASSD  of  Screener  reassignments  (SCCNG). 

3. 1.1 .2. 2. 3  Port  fsagn-i.  This  port  provides  a  means  for  FASSD  and  EMP 
to  communicate  with  an  FSMGP.  The  port  name  consists  of  the  characters 
"fsagn"  followed  by  the  WES  user's  FSM  ID  as  a  five  character  string  with 
leading  zeros.  FASSD  writes  messages  SCASS  and  SCNAV  on  this  port  to  one 
or  more  of  the  currently  running  FSMGPs.  Messages  SCASS  and  SCNAV  are 


replies  to  the  request  message  UAKEQ  which  FASSD  reads  from  its  input 
port  faport.  Messages  BRCNG  and  SMCNG  can  be  written  at  any  time  on  this 
port  by  the  EMP. 

3. 1.1 .2.2 .4  Port  screq-i.  This  port  provides  a  means  for  a  FSMGP  to 
request  a  downgrade  (DGREQ).  The  port  name  consists  of  the  characters 
"screq"  followed  by  the  Screener's  user  ID  as  a  five  character  string 
with  leading  zeroes.  The  FSMGP  writes  a  DGREQ  message  to  the  appropriate 
SCTP  using  this  port.  The  SCTP  will  write  a  reply  message  (DGACC,  DGREJ 
or  DRLGO)  on  the  appropriate  fsrly-i  port. 

3.1 .1.2. 2. 5  Port  fsrly-i.  This  port  provides  a  means  for  a  SCTP  to  com¬ 
municate  with  a  FSMGP.  The  port  name  consists  of  the  characters  "fsrly" 
followed  by  the  WES  user's  FSM  ID  as  a  five  character  string  with  leading 
zeroes.  The  SCTP  writes  messages  DGACC,  DGREJ  and  DRLGO  on  this  port  to 
the  appropriate  FSMGP.  These  are  reply  messages  to  a  DGREQ  message  which 
the  SCTP  read  from  its  input  port  screq-i. 

3.1.2  Process/Data  Structure  Interfaces 

To  this  point  we  have  described  FSM's  data  structures  in  great  detail  but 
have  only  given  a  simplistic  view  of  how  they  are  manipulated  by  FSM  pro¬ 
cesses.  In  this  subsection  we  now  describe  how  and  when  processes  access 
FSM  data  structures  and/or  communicate  using  them  (from  a  data  structure 
viewpoint).  For  particulars  of  data  access  from  the  process  view,  see 
Section  3.2.  The  descriptions  presented  below  refer  to  Figures  3-24  and 
3-25,  disk  files  and  ports,  respectively. 


gure  3-2 


3. 1.2.1  oisk  File  Interfaces.  All  FSM  disk  file  data  structures  will  be 
described  with  respect  to  process  manipulation.  These  disk  files  are: 

a.  Context  Data  (GCONT) 

b.  Context  Text  Data  (GTEXT) 

c.  Context  Halting  Delimiter  Data  (GHDEL) 

d.  User  Profile  Data  (GPROF) 

e.  System  Environment  Data  (GENV) 

f.  User  Environment  Data  (GENV) 

g.  User  Logon  File  (GLF) 

h.  Downgrade  File  (GDOWN) 

i.  Downgrade  Context  Information  File  (GINFO) 

j.  Audit  Request  Data 

k.  Audit  File  (GAUD) 

l.  Audit  Event  Data  (GAEV) 

m.  Audit  Text  Data 

n.  Screener  Lock-File  (sclog-i) 


3.1. 2. 1.1  Context  Data  (GCONT).  Fsn  Context  Data  (GCONT)  is  manipulated 
by  only  one  FSM  process  type,  the  FSM  Guardian  Program  (FSMGP).  This 
data  structure  contains  the  entire  user/WWMCCS  dialogue  context  and  con¬ 
trols  all  automatic/manual  screening  and  filtering  decisions.  It  is 
read-only  and  is  used  to  control  the  referencing  of  its  related  data 
structures,  the  Context  Text  Data  (GTEXT)  and  the  Context  Halting  Delimi¬ 
ter  Data  (GHDEL) .  Since  this  data  structure  is  read-only  it  does  not 
need  to  be  locked  during  FSM  operation. 

3.1 .2.1 .2  Context  Text  Data  (GTEXT).  FSM  Context  Text  Data  (GTEXT)  is 
manipulated  by  only  one  FSM  process  type,  FSMGP.  This  data  structure 
contains  the  textual  data  of  the  user/WWMCCS  dialogue  context  and  is 
pointed  to  by  appropriate  entries  in  GCONT.  Since  this  data  structure  is 
read-only  it  does  not  require  locking  sequences. 

3. 1.2. 1.3  Context  Halting  Delimiter  Data  (GHDEL).  FSM  Context  Halting 
Delimiter  Oata  (GHDEL)  is  referenced  by  only  one  FSM  process  type,  FSMGP. 
This  data  structure  contains  halting  delimiter  strings  utilized  by  FSMGP 
in  recognizing  user/system  data  sequences.  As  with  its  related  data 
structures  GCONT  and  GTEXT,  this  data  structure  does  not  require  locking 
sequences. 

3. 1.2. 1.4  User  Profile  Data  (GPROF) .  The  User  Profile  Data  (GPROF) 
structure  is  created  by  FSMGP  for  each  WES  user  logged  onto  FSM.  GPROF 
contains  the  current  state  the  WES  user  is  in  during  his  dialogue  with 
WWMCCS.  GPROF  is  updated  by  FSMGP  each  time  the  WES  user  enters  another 
profile  state.  The  Environment  Manager  Program  (EMP)  reads  GPROF  when 


the  Environment  Manager  (EM)  wishes  to  view  the  profile  of  some  WES  user 
logged  onto  FSM. 

3.1 .2.1 .5  System  Environment  Data  (GENV).  The  Environment  Data  (system) 
(GENV)  structure  is  created  when  the  FSM  is  initiated  and  contains  a  set 
of  default  environment  values.  The  Environment  Manager  Program  (EMP), 
under  direction  of  the  EM,  updates  this  data  structure  to  reflect  new 
system-wide  environment  values.  EMP  also  displays  GENV  to  the  EM.  FSMGP 
utilizes  the  system  GENV  to  establish  initial  local  environment  values 
for  its  local  user  (it  is  used  to  build  the  user  level  GENV). 

3.1 .2.1 .6  User  Environment  Data  (GENV).  The  Environment  Data  (user) 
Structure  is  created  by  FSMGP  when  a  WES  user  logs  onto  FSM.  FSMGP  uses 
the  system  GENV  data  structure  to  initialize  the  user's  local  GENV.  As 
FSMGP  receives*  new  environment  values  from  EMP,  it  updates  the  user's 
GENV  accordingly. 

3. 1.2. 1.7  Global  Logon  File  (GLF).  The  Global  Logon  File  (GLF)  exists 
when  FSM  is  initiated  and  is  updated  by  the  FSM  Guardian  Process  (FSMGP), 
FSM  Assignment  Daemon  (FASSD),  Screener  Trusted  Process  (SCTP),  Environ¬ 
ment  Manager  Process  (EMP)  and  a  stand-alone  maintenance  program,  USER 
(see  Appendix  E).  When  a  WES  user  logs  onto  FSM,  FSMGP  updates  GLF  to 
reflect  that  fact.  SCTP  operates  similarly  when  a  Screener  logs  on. 
FASSD  modifies  GLF  when  WES  users  or  Screeners  log  off.  When  an  EM  logs 
on  or  off,  EMP  modifies  GLF.  Additionally,  FASSD  modifies  GLF  when  an 
assignment  is  made  and  when  an  EM-directed  reassignment  occurs.  USER 
modifies  GLF  whenever  it  is  directed  to  do  so. 


3.1 .2.1.8  Downgrade  file  (GDOWN).  The  Downgrade  File  (GDOWN)  is  created 
by  the  FSM  Guardian  Program  (FSMGP)  when  a  user  logs  onto  FSM.  This  data 
structure  contains  WWMCCS  output  for  manual  screening  by  the  FSM  Screener 
assigned  to  the  WES  user.  Therefore  the  Screener  Trusted  Process  (SCTP) 
must  read  GDOWN. 

3. 1.2. 1.9  Downgrade  Context  File  (GINFO).  The  Downgrade  Context  File 
(GINFO)  is  created  by  FSMGP  when  a  WES  user  logs  onto  FSM.  This  data 
structure  contains  dialogue  context  data  used  by  the  FSN  Screener  in  mak¬ 
ing  a  decision  as  to  the  sensitivity  of  the  downgrade  data  (i.e.,  GDOWN). 
Under  Screener  control,  SCTP  reads  GINFO,  displaying  a  screen  at  a  time 
to  the  Screener. 

3.1.2.1.10  Audit  Request  Data.  Audit  Request  Data  is  created  as 
separate  event/text  file  entries  by  four  FSM  processes:  the  FSM  Guardian 
Program  (FSMGP),  the  Environment  Manager  Program  (EMP),  the  Screener 
Trusted  Program  (SCTP)  and  the  FSM  Assignment  Daemon  (FASSD) .  FSMGP 
builds  event/text  entries  for  many  different  audit  events,  such  as  enter¬ 
ing  new  WWMCCS  subsystems,  inputting  commands,  and  so  on.  EMP  creates 
audit  event  entries  when  the  EM  alters  the  environment.  SCTP  audits 
Screener  logon  and  whenever  a  downgrade  request  is  accepted  for  inspec¬ 
tion.  FASSD  creates  audit  events  when  a  WES  user  or  Screener  logs  off  of 
FSM  or  a  WES  user/Screener  assignment  is  made.  The  FSM  Audit  Daemon 
(FAO)  is  responsible  for  updating  the  current  FSM  Audit  Trail  with  these 
audit  request  data.  FAD  deletes  the  request  data  after  it  is  recorded  in 
the  current  audit  trail. 


3.1.2.1.11  Audit  File  (GAUD).  The  Audit  File  (GAUD)  exists  when  FSM  is 


initiated  and  is  updated  by  the  Audit  Trail  Display  Program  (ATDP)  under 
direction  of  the  EM.  GAUD  reflects  the  current  and  old  (saved)  audit 
trail  events/texts.  When  the  EM  desires  to  save  the  current  audit  trail, 
EMP  updates  GAUD  to  reflect  the  saved  event/text  pair.  FAD  also  updates 
GAUD  to  reflect  Information  concerning  the  current  audit  trail  event/text 
pair.  Since  both  ATDP  and  FAD  update  GAUD,  it  requires  a  lock  sequence. 

3.1.2.1.12  Audit  Trail  Event  Data  (GAEV)  Structure.  The  Audit  Trail 
Event  Data  (GAEV)  Structure  is  created  by  the  FSM  Audit  Daemon  (FAD)  and 
contains  current  audit  trail  events.  EMP,  under  direction  of  the  EM,  can 
display  this  data  in  concert  with  its  text  file  counterpart.  When  the  EM 
wishes  to  save  the  current  audit  trail  event/text  pair,  EMP  creates 
another  copy  of  these  data  structures  and  recreates  the  current  GAEV  to 
zero  length.  Although  both  ATDP  and  FAD  have  write  access  to  the  current 
GAEV,  a  lock  sequence  prevents  an  update  conflict. 
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3.1.2.1.13  Audit  Trail  Text  Data  Structure.  The  Audit  Trail  Text  Data 
Structure  is  handled  identically  as  GAEV.  It  is  created  by  FAD  and  is 
displayed  by  ATDP.  ATDP  also  deletes  the  current  version  of  this  data 
structure  when  the  EM  commands  it  to  be  saved. 

3.1.2.1.14  Screener  Lock-File  (sclog-i).  The  sclog-i  lock-file  is 
created  when  an  active  Screener  is  logging  off.  Its  presence  indicates 
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that  the  owner  (Screener)  is  unavailable  for  any  further  downgrade 


requests.  Prior  to  sending  his  assigned  Screener  a  downgrade  request  IPC 


message,  FSMGP  checks  for  the  existence  of  this  port  (the  "-i"  is  the 


3  -  100 


Screener's  FSM  ID  and  uniquely  identifies  the  file).  If  it  is  present, 
FSMGP  must  defer  its  downgrade  request  until  another  Screener  is  assig¬ 
ned.  Otherwise,  the  downgrade  request  can  be  made  as  usual. 

3. 1.2.2  Port  Interfaces.  Figure  3-25  illustrates  the  FSM  port/process 
interface.  Ports  are  used  in  FSM  as  FIFO  message  queues  and  provide  an 
efficient  mechanism  for  inter-process  communication  (IPC).  FSM  ports 
are: 

a.  FSM  Assignment  Daemon  (faport)  Port 

b.  Screener  Assignment  (fsagn-i)  Port 

c.  Screener  Request  (screq-i)  Port 

d.  Screener  Reply  (fsrly-i)  Port 

Following  is  a  description  of  these  ports  with  respect  to  their  utiliza¬ 
tion  by  FSM  processes. 

3.1. 2. 2.1  FSM  Assignment  Daemon  (faport)  Port.  The  faport  port  is 
created  by  the  FSM  Assignment  Daemon  (FASSD)  and  is  utilized  by  existing 
FSM  Guardian  Processes  (FSMGP)  for  requesting  WES  user/Screener 
assignments,  Screener  Trusted  Processes  (SCTP)  for  Screener 
logons/logoffs,  and  Environment  Manager  Process  (EMP)  for  reassignment 


requests. 


3.1 .2.2.2  Screener  Assignment  (fsagn-i)  Port.  The  fsagn-i  port  is 
created  by  FSMGP  when  it  is  invoked  by  a  WES  user.  This  port  is  written 
to  by  FASSD  to  pass  WES  user/Screener  assignments  and  by  EMP  to  indicate 
new  environment  values  for  the  WES  user.  This  port  type  exists  for  each 
WES  user  logged  onto  FSM  and  therefore  utilizes  the  user's  identifier  in 
its  name  (i.e.,  "-i"  means  the  "ith"  WES  user  user  10).  Port  fsagn-i  is 
deleted  from  FSM  when  the  WES  user  logs  off  of  FSM  and  FSMGP  exits. 

3. 1.2. 2. 3  Screener  Request  <screq-i>  Port.  The  screq-i  port  is  created 
by  the  Screener  Trusted  Process  (SCTP)  and  is  written  to  by  an  assigned 
FSMGP  for  Screener  requests.  Since  a  FSM  Screener  can  service  more  than 
one  WES  user,  potentially  many  FSMGPs  will  be  writing  on  any  individual 
screq-i  port.  Note  here,  since  more  than  one  Screener  can  be  logged  onto 
FSM,  the  Screener 's  user  ID  is  used  in  the  port  name  (i.e.,  *'-i" 
represents  the  "ith"  Screener  user  ID).  This  port  is  deleted  from  the 
system  when  the  Screener  logs  off  of  FSM  and  SCTP  exits. 

3. 1.2. 2. 4  Screener  Reply  (fsrly-i)  Port.  The  fsrly-i  port  is  created  by 
FSMGP  and  is  written  to  by  an  assigned  SCTP.  In  this  situation,  since  a 
WES  user  can  only  have  one  Screener  assigned  to  him  at  any  one  time,  only 
one  SCTP  will  be  writing  on  this  port.  SCTP  uses  this  port  to  inform  the 
FSMGP  of  the  Screener's  downgrade  decision  (i.e.,  accept/reject)  or  of 
Screener  logoff.  This  port  is  deleted  from  the  system  when  the  WES  user 
logs  off  of  FSM  and  FSMGP  exits. 


3.2  DETAILED  FUNCTIONAL  REQUIREMENTS 


This  section  provides  descriptions  of  the  programs  comprising  the  FORSCOM 
Security  Monitor  (FSM).  Each  program  description  is  organized  as  fol¬ 
lows.  A  short  general  description  is  followed  by  a  list  of  the  FSM  glo¬ 
bal  data  used.  Then,  if  applicable/  a  list  of  pertinent  local  data  con¬ 
tained  in  the  program  is  provided.  A  general  process  flow  details  the 
major  paths  the  program  traverses  in  accomplishing  its  task(s)/  with 
references  to  global  and  local  data  as  well  as  major  functions.  The 
descriptions  of  major  functions/  if  any,  used  in  the  general  process  flow 
discussion  complete  the  program  description. 

The  FSM  programs  described  include: 

a.  FORSCOM  Security  Monitor  Guardian  Program  (FSMGP) 

b.  Screener  Trusted  Program  (SCTP) 

c.  FSM  Assignment  Daemon  (FASSD) 

d.  FSM  Audit  Daemon  (FAD) 

e.  Environment  Manager  Program  (EMP) 


f 


Audit  Trail  Display  Program  (ATDP) 


Notice,  the  Remote  Network  Processor  Emulator  (RNPE)  is  not  described 
since  it  is  furnished  by  a  subcontractor  and  its  internal  operations  are 
unknown. 

3.2.1  FORSCOM  Security  Monitor  Guardian  Program  (FSMGP) 

The  FORSCOM  Security  Monitor  Guardian  Program  (FSMGP)  is  responsible  for 
following  user/system  interactions  in  the  restricted  UUMCCS  environment. 
It  must  know  exactly  where  a  user  is  in  any  given  subsystem  so  that  down¬ 
grade  decisions  can  be  made.  Any  given  user  input  can  be  identified  only 
in  the  context  of  what  system  output  preceeded  it  and  what  is  to  follow 
it.  Conversely,  any  given  system  output  can  be  understood  only  in  terms 
of  what  has  happened  before  and  what  the  possible  future  events  are.  To 
do  this  tracking  FSMGP  must  rely  on  a  disk  file,  the  context  file,  which 
contains  all  user  inputs  and  system  outputs,  linked  together  in  a  tree¬ 
like  structure.  FSMGP  is  thus  table  driven,  and  its  processing  depends 
heavily  on  the  information  contained  in  the  context  file. 

3. 2. 1.1  Global  Data  Usage.  FSMGP  uses  the  following  global  data  files: 
GCONT  Context  items  and  associated  subcontexts. 

GHDEL  Context  halting  delimiter  strings. 

GTEXT  Context  text  strings. 

GENV  System  environment  values. 

GINFO  Downgrade  context  information  buffer. 


GLF 


Global  logon  file. 


GPROF  Current  processing  state  buffer. 

3. 2. 1.2  Local  Data  Usage.  FSMGP  uses  the  following  pertinent  local 

data: 

IB  Working  input  buffer. 

3.2.1 .3  General  Process  Flow.  The  FORSCOM  Security  Monitor  Guardian 

Process  (FSMGP)  is  activated  when  its  parent  process,  FSMGTTY,  receives 
user  input  from  the  terminal  keyboard.  FSMGP  follows  the  standard  WWMCCS 
TSS  and  TLCF  logon  procedures  in  the  LOGON  function  which  also  esta¬ 
blishes  initial  conditions.  FSMGP  receives  the  terminal  identification 
as  an  argument  and  following  local  validation  of  the  low-side  WES  user's 
WWMCCS  userid,  communicates  to  the  FSM  Assignment  Daemon  (FASSD),  via  an 
Inter-Process  Communication  (IPC)  message  on  the  port  faport,  requesting 
that  a  Screener  be  assigned  to  this  user.  FASSD  communicates  to  FSMGP 
via  the  port  fsagn,  which  is  read  only  by  the  FSMGP  for  this  user  (the 
portname  has  a  user  identifier  appended  to  it  making  it  unique  for  this 

FSMGP).  If  there  is  no  Screener  available,  the  user  is  allowed  to  pro¬ 

ceed  until  one  is  needed.  Otherwise  the  Screener  identification,  user 
identification  and  terminal  identification  are  written  to  the  Global 
Logon  File  (GLF),  using  a  lock  mechanism.  FSMGP  then  reads  the  system 
default  Environment  Values  file  (GENV)  to  determine  the  current  default 
screen  mode  and  bandwidth.  This  information  is  then  written  to  the 
user's  copy  of  the  GENV,  created  by  LOGON,  so  that  FSMGP  can  update  these 
values  if  the  Environment  Manager  decides  to  change  them.  An  audit  event 


is  then  passed  to  the  Audit  Function,  GFAUDIT,  indicating  that  a  user  has 
logged  onto  FSM.  LOGON  also  creates  the  user  Profile  file  (GPROF),  Down¬ 
grade  file  (GDOWN)  and  the  Downgrade  Context  file  (GINFO). 

LOGON  processing  then  continues  as  if  for  a  normal  logon  to  WWMCCS  TSS  or 
TlCF  systems.  Upon  successful  completion  of  the  logon  sequence  an  event 
is  passed  to  GFAUDIT  recording  that  fact. 

FSMGP  then  enters  the  main  loop  of  its  processing  which  continues  until 
the  user  logs  off.  Since  the  loop  is  iterated  each  time  a  user  input  or 
a  system  output  occurs,  a  new  context  must  be  established  with  each 
iteration.  This  is  accomplished  by  reading  the  context  file  GCONT  at  the 
point  established  by  the  last  context.  The  current  context,  with  header 
and  a  variable  amount  of  subcontexts,  is  copied  into  a  buffer  local  to 
FSMGP  so  that  quick  access  can  be  made  to  the  information.  Processing 
then  takes  alternate  paths  depending  on  whether  the  current  context  is 
system  output  or  user  input. 

If  it  is  a  user  context  a  loop  is  entered  which  reads  inputs  from  the 
user  until  a  match  is  made  to  one  of  the  subcontext  strings  in  the 
current  context.  Before  FSMGP  reads  user  input  the  GPROF  file  is  updated 
to  reflect  that  fact.  If  no  match  is  found,  an  error  message 
***  UNRECOGNIZABLE  OR  DISALLOWED  INPUT  —  PLEASE  TRY  AGAIN  *** 
is  issued  to  the  user,  the  previous  system  output  is  re-written  to  the 
terminal,  an  audit  event  is  recorded  indicating  invalid  user  input  and 
the  user  is  expected  to  enter  new  input.  If  a  match  is  made  the  particu¬ 
lar  subcontext  is  checked  for  the  presence  of  a  special  function.  Special 


functions  for  user  subcontexts  perform  command  syntax  verification.  If  a 
special  function  is  present  it  is  executed.  If  the  user's  syntax  was 
incorrect,  it  is  treated  the  same  as  if  it  was  invalid  input  (see  above). 
If  no  error  is  detected  the  loop  is  exited  and  the  user  input  is  moved  to 
the  GINFO  buffer,  a  local  buffer  to  FSMGP  that  is  continually  written  in 
a  circular  fashion  enabling  the  most  current  user/system  interactions  to 
be  saved.  FSMGP  then  writes  the  matched  user  input  to  the  system,  audits 
that  fact  and  establishes  a  new  context  in  preparation  for  the  system 
response. 


If  the  current  context  is  a  set  of  expected  system  outputs,  the  System 
Output  Match  (SOM)  function  is  called.  This  function  updates  GPROF  to 
reflect  the  fact  that  FSMGP  is  waiting  for  system  output,  and  reads  sys¬ 
tem  output  from  the  Remote  Network  Processor  Emulator  (RNPE) ,  comparing 
it  to  the  set  of  subcontexts  in  the  current  context.  If  a  match  is 
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found,  the  system  output  is  written  to  the  user's  Downgrade  file  (GDOWN) , 
which  eventually  is  written  to  the  user  (if  the  system  output  is  fixed), 
or  the  Screener  (if  the  system  output  is  variable)  for  downgrading.  Sys¬ 
tem  output  may  be  repeating  or  nonrepeating,  which  simply  serves  to  indi¬ 
cate  the  size  of  a  particular  expected  system  output.  Contexts  of  the 
repeating  type  are  expected  to  be  large,  as  in  the  case  of  TCON  skeletons 
or  TLCF  messages,  and  oftentimes  there  is  only  one  subcontext  item.  If 
the  context  indicates  that  the  expected  system  output  is  repeating,  SOM 
may  make  repeated  reads  to  acquire  the  entire  system  output  text.  If  the 
current  context  is  variable  repeating  (e.g.  TCON  skeleton  with  data  or  a 
TLCF  message),  SOM  accumulates  system  output  line-by-line.  If  the 


current  context  is  fixed  repeating  (e.g.  TCON  skeleton  without  data),  SOM 
acquires  the  entire  system  output  matching  each  character  until  the  ter¬ 
minating  delimiter  sequence  is  encountered. 

If  the  current  context  is  nonrepeating,  system  outputs  are  expected  to  be 
smaller  and  there  may  be  more  than  one  subcontext  item.  In  this  case  SOM 
loops  for  the  number  of  subcontexts  or  until  a  match  is  found  to  the 
current  system  output.  If  no  match  is  found  to  the  system  output,  SOM 
returns  that  fact. 

If  SOM  returns  with  no  match  to  a  system  output  FSMGP  audits  the  no  match 
condition.  Then  a  special  function  is  executed  which  sends  a  simulated 
user  input  to  the  system  to  get  FSMGP  back  in  synchronization.  This  sen¬ 
ding  of  simulated  user  input  is  known  as  a  "pop-up".  The  special  func¬ 
tion  used  is  indexed  by  the  current  context  and  performs  a  specific 
action  depending  on  the  particular  place  FSMGP  is  in  the  current  subsys¬ 
tem.  The  current  context  also  contains  a  pointer  to  the  next  context  in 
the  event  that  SOM  returns  no  match.  This  resynchronization  event  is 
audited  and  FSMGP  continues  execution  at  the  next  context. 

If  SOM  finds  a  match  to  the  system  outut  FSMGP  must  then  decide  whether 
or  not  it  is  to  be  sent  to  the  Screener.  System  output  may  or  may  not  be 
automatically  screened  by  FSMGP.  This  depends  on  the  current  screen  mode 
and  bandwidth.  FSMGP  determines  these  values  by  first  checking  the  port 
fsagn  to  see  if  the  EM  has  changed  either  of  these  values.  If  so,  the 
user's  Environmental  Values  file  CGENV)  is  updated.  FSMGP  switches  on 


the  screen  mode  value 


If  the  current  screen  mode  is  for  no  messages  to  be  sent  to  the  Screener, 
the  system  output  contained  in  the  GDOWN  file  is  sent  to  the  user's  ter¬ 
minal.  FSMGP  then  audits  that  fact,  establishes  a  new  context,  and 
repeats  its  main  execution  loop. 

If  the  current  screen  mode  is  for  all  messages  to  be  sent  to  the 
Screener,  the  user's  GPROF  is  updated  to  show  that  FSMGP  is  waiting  for 
the  Screener's  decision,  and  a  message  is  sent  to  SCTP  via  its  port 
screq,  requesting  a  downgrade.  This  message  contains  the  name  of  the 
user's  GDOWN,  as  well  as  the  name  of  the  user's  GINFO.  FSMGP  then  waits 
for  the  Screener's  reply  on  the  fsrly  port,  which  contains  the 
accept/reject  decision.  If  the  Screener  accepts  the  system  output,  an 
audit  event  of  that  fact  is  recorded,  the  system  output  is  sent  to  the 
user,  a  new  context  is  established  and  FSMGP^continues  at  the  top  of  its 
main  processing  loop.  If  the  Screener  rejects  the  system  output,  an  audit 
event  is  recorded,  an  error  message  is  sent  to  the  user,  and  the  special 
function  that  resynchronizes  FSMGP  is  executed. 

If  the  current  screen  mode  is  for  normal  and  the  matched  subcontext  indi¬ 
cates  that  the  current  system  output  is  fixed,  the  bandwidth  rate  is 
checked.  This  is  accomplished  in  the  CBR  function,  which  computes  a  rate 
for  the  number  of  automatically  screened  messages  that  have  occurred  in  a 
specific  amount  of  time.  If  this  bandwidth  has  been  exceeded,  the  user's 
screen  mode  is  automatically  changed  to  "all”,  and  his  GENV  is  updated  to 
reflect  that  fact.  The  system  output  is  then  sent  to  the  Screener,  and 
processing  continues  as  above.  If  the  bandwidth  rate  was  not  exceeded. 
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the  system  output  is  written  to  the  user,  an  audit  event  is  recorded,  and 
processing  continues  in  the  main  loop  with  a  new  context.  Finally,  if 
the  current  system  output  is  variable,  it  is  sent  to  the  Screener  and 
processing  continues  as  above. 

When  the  user  terminates  his  session  with  WWMCCS,  the  LOGOFF  function  is 
called  to  terminate  the  program's  execution.  This  function  is  invoked  as 
a  special  function  when  the  user  enters  a  terminating  sequence  (e.g.  bye) 
at  an  appropriate  point.  LOGOFF  sends  a  logoff  notification  to  FASSD, 
via  the  faport,  so  that  FASSD  may  change  GLF  accordingly. 

3.2 .1 .4  Major  Functions. 

LOGON 

The  LOGON  function  is  responsible  for  establishing  FSMGP  initial  condi¬ 
tions  and  for  tracking  a  user's  progress  through  the  WWMCCS  TLCF  and  TSS 
logon  procedures.  LOGON  writes  an  IPC  to  the  FASSD,  via  the  port  faport, 
requesting  that  a  Screener  be  assigned  to  the  FSMGP 's  user.  LOGON 
receives  FASSD 's  reply  on  the  port  fsagn,  and  allows  the  user  to  continue 
until  a  Screener  is  necessary.  (At  that  time,  if  there  is  no  Screener 
available,  the  user  is  given  the  option  of  waiting  for  a  Screener 
assignment  (and  subsequent  downgrade  decision)  or  logging  off.)  If  a 
Screener  has  been  assigned,  this  information,  as  well  as  the  user's  ter¬ 
minal  identification,  is  written  to  GLF  —  a  Global  Logon  File  with 
records  for  each  valid  user.  Since  this  file  is  written  to  by  every 
FSMGP  during  a  use**  logon,  a  lock  mechanism  must  be  used.  LOGON  then 
reads  the  system  default  Environment  Values  file  (GENV)  to  determine  the 
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system-wide  current  screen  mode  and  bandwidth  rate.  This  infor-  mat  ion 
is  then  written  to  the  user's  copy  of  GENV.  The  user's  GENV  is  main¬ 
tained  by  FSMGP  and  is  updated  when  it  is  discovered  that  the  Environment 
Manager  has  changed  one  of  these  values.  LOGON  then  calls  the  the  global 
function  GFAUDIT  so  that  an  audit  event  indicating  that  the  user  has  log¬ 
ged  on  to  WWMCCS  can  be  recorded  in  the  audit  file.  LOGON  then  processes 
a  user's  logon  to  WWMCCS  TLCF  or  TSS  systems  in  the  normal  fashion  with 
two  exceptions.  The  user's  response  to  the  "IDENT?"  question  is  used  to 
look-up  this  user's  User  Master  Catalog  (UMC)  designation.  All  subse¬ 
quent  references  to  user-owned  files,  regardless  of  the  WWMCCS  subsystem 
involved/  must  be  preceeded  by  this  UMC.  Also/  the  response  "zzz"  to  the 
system  query  "CLASSIFICATION  OF  YOUR  OUTPUT?"  is  substituted  for  the 
user's  response  so  that  the  paging  and  classification  headers  are  not 
displayed  by  the  system.  LOGON  also  creates  the  user's  copy  of  the 
Environment  Values  file  (GENV)/  the  user's  Profile  file  (GPROF) /  the 
Downgrade  file  that  is  sent  to  the  Screener  (GDOWN) /  and  the  Downgrade 
Context  file  that  the  Screener  may  peruse  during  a  downgrade  (GINFO). 

UIM 

The  User  Input  Match  function  (UIM)  searches  the  subcontexts  of  the 
current  context  for  a  match  to  the  user  input  that  it  reads  upon  its 
invocation.  UIM  loops  for  the  number  of  subcontexts.  If  a  match  is 
found  to  the  user's  input  the  loop  is  exited.  If  a  null  subcontext  is 
encountered  it  is  saved  so  that  it  may  be  returned  as  a  default  match. 
Only  one  null  subcontext  per  context  set  is  allowed.  A  matched  user 
input  is  moved  to  the  Downgrade  Context  Buffer  (GINFO)/  as  well  as 


returned  to  FSMGP  so  that  it  can  be  written  to  the  system.  If  no  match 
is  found,  this  fact  is  returned  to  FSMGP.  FSMGP  then  issues  an  error 
message  to  the  user  and  calls  UXM  again. 

WTP 

The  Write  to  Profile  function,  WTP,  updates  the  user's  GPROF  whenever 
FSMGP  is  waiting  for  the  next  user  input,  system  output  or  Screener 
action.  Additionally,  during  logon  only,  WTP  is  called  to  record  the 
fact  that  FSMGP  is  waiting  for  an  RNPE  connection.  Under  normal  cir¬ 
cumstances,  this  event  will  occur  once  for  a  very  short  duration.  WTP  is 
called  when  a  user  input  match  search  is  made  (by  UIM),  when  a  system 
output  match  search  is  made  (by  SOM),  or  when  a  downgrade  request  is  made 
to  the  Screener  (by  STS).  GPROF  is  created  for  the  user  by  LOGON  upon 
invocation  of  FSMGP.  WTP  opens  GPROF,  writes  the  index  of  the  appropri¬ 
ate  event  (passed  to  it  by  FSMGP)  as  well  as  the  current  subsystem  index 
(also  passed  to  it  by  FSMGP)  and  current  DTG.  WTP  then  closes  GPROF  and 
exits. 

WCB 

The  Write  Context  Buffer  function,  WCB,  maintains  the  Downgrade  Context 
Buffer  (GINFO)  in  preparation  for  its  eventual  transf errence  to  the  GINFO 
file  for  the  Screener's  perusal  during  a  downgrade.  All  user  inputs  and 
system  outputs  are  moved  to  GINFO  by  WCB,  but  GINFO  is  written  to  the 
GINFO  file  only  when  a  downgrade  request  occurs,  thus  ensuring  that  the 
most  current  information  is  in  the  file.  WCB  maintains  GINFO  in  a  wrap 
around  fashion,  moving  data  to  GINFO  until  the  end  of  the  buffer  is 


reached,  and  then  overwriting  old  data  at  the  beginning  of  the  buffer. 

I 

When  data  is  written  to  the  GINFO  file  from  GINFO,  the  start  of  transfer-  j 

rence  in  GINFO  is  that  point  at  which  data  was  last  moved  into  GINFO.  J 
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The  System  Output  natch  function  (SON)  searches  the  current  context  for  a  ! 

» 
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match  to  the  current  system  output.  System  output  contexts  may  be  fixed  • 

t 

or  variable  depending  on  whether  or  not  the  system  output  that  matches 
them  is  to  be  sent  to  the  Screener.  System  ouput  contexts  may  also  be 

repeating  or  non-repeating,  which  provides  an  indication  of  expected  sys-  < 

| 
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tem  output  si2e.  Repeating  contexts  are  used  when  larger  system  output  i 

is  expected  (e.g.  TLCF  messages  or  TCON  skeletons).  When  a  system  output 

is  matched  to  a  subcontext,  the  output  is  written  to  GDOWN,  and  SON 

returns  a  match  found  condition.  If  no  match  is  made,  SON  returns  that 

fact  to  FSNGP. 

Repeating  contexts  will  contain  only  one  subcontext.  If  the  current  con¬ 
text  is  variable  repeating  SON  looks  for  the  terminating  sequence  (from 
the  place  in  the  GHDEL  file  pointed  to  by  the  context)  in  the  system  out¬ 
put  returned  by  the  Read  System  Output  function  (RSO).  If  the  termina¬ 
ting  sequence  is  not  found,  the  searched  data  is  written  to  GDOWN  and  ^ 

another  call  to  RSO  is  made.  This  sequence  of  events  is  continued  until 
a  match  is  made  or  a  read  error  occurs,  either  of  which  is  returned  to 


FSNGP. 
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If  the  current  context  is  fixed  repeating  RSO  is  called  and  the  system 
output  is  matched  character-for-character  to  the  subcontext  until  its  end 
or  until  the  system  output  is  exhausted.  In  the  latter  case  the  system 
output  is  written  to  GDOWN  and  more  system  output  is  read  and  the  process 
continues.  In  the  former  SOM  writes  to  GDOWN  and  returns  that  a  match 
has  been  found. 

If  the  current  context  is  non-repeating  there  may  be  several  subcontexts 
to  compare  against  the  current  system  output,  and  SOM  loops  for  the  num¬ 
ber  of  subcontexts.  Also,  one  of  the  subcontexts  could  be  null,  which 
indicates  that  any  system  output  is  to  be  accepted.  If  a  fixed  subcon¬ 
text  is  encountered  in  the  loop  SOM  attempts  an  exact  match.  If  a  match 
is  found,  it  is  written  to  GDOWN  and  SOM  exits.  If  not,  the  search  con¬ 
tinues.  If  a  subcontext  is  encountered  that  is  null,  it  is  saved  as  a 
default  match.  If  a  subcontext  is  encountered  that  is  variable,  a  sub¬ 
string  match  is  attempted  on  the  system  output.  If  a  match  is  found, 
GDOWN  is  written  and  SOM  returns  to  FSMGP.  Otherwise  the  search  con¬ 
tinues. 

At  the  end  of  the  loop  the  presence  of  a  null  subcontext  is  determined. 
If  so,  a  match  to  the  system  output  is  assumed  and  it  is  written  to  GDOWN 
and  SOM  returns.  If  no  null  subcontext  was  flagged  SOM  returns  a  no 
match  condition. 

KSO 


The  Read  System  Output  (RSO)  function  is  responsible  for  reading  WWMCCS 
system  outputs  through  the  Remote  Network  Processor  Emulator  (RNPE) . 


a 


I 

I 


4' 

I 

‘li* 


This  function  must  initiate  reads  from  WWMCCS  and  buffer  them  so  that  SOM 
can  attempt  a  subcontext  match.  RSO  must  therefore  stop  reading  when  one 
of  the  delimiter  strings  is  encountered  or  a  time-out  has  occurred.  The 
RSO  function  maintains  a  local  buffer,  the  input  buffer  (IB),  in  which  it 
puts  data  from  RNPE.  RSO  is  passed  the  delimiter  set  by  SOM  (i.e.  a 
pointer  to  it)  so  that  it  may  search  for  these  characters  in  IB.  RSO 
begins  searching  in  IB  where  it  last  left  off  from  a  previous  invocation. 
RSO  searches  the  buffer  until  a  match  is  found  to  one  of  the  delimiter 
strings  or  until  the  end  of  the  system  output  in  IB  is  encountered.  If 
this  is  the  first  invocation  of  RSO  the  end  of  the  system  output  will  be 
found  at  the  outset  so  that  an  initial  read  will  occur.  The  read  may 
result  in  normal  completion  with  the  number  of  characters  read  returned, 
an  I/O  error  from  RNPE  or  a  time-out  error.  RSO  returns  to  SOM  when 
either  error  condition  results.  After  a  read,  RSO's  buffer  pointers  are 
updated  and  an  end  of  read  marker  is  placed  in  the  buffer  indicating  the 
end  of  the  system  output,  and  the  search  is  continued.  If  a  match  is 
found  to  one  of  the  delimiter  strings,  pointers  to  the  beginning  and  end 
of  the  system  output  are  returned  to  SOM. 


The  Check  Environment  Set  function  (CES)  determines  current  values  for 
the  Screener  identification,  bandwidth  rate  and  screen  mode.  Screener 
identification  is  used  in  communicating  with  SCTP  when  a  downgrade 
request  is  made  by  FSMGP.  Since  a  Screener  is  not  permanently  assigned 
to  any  given  user  (the  Screener  may  log  off  or  be  reassigned  by  an  EM), 
FSMGP  must  know  the  assigned  Screener  before  a  request  is  made.  Bandwidth 
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rate  determines  the  rate  at  which  messages  are  allowed  to  be  automati¬ 
cally  screened.  If  this  rate  is  exceeded,  FSMGP  must  change  its  user's 
screen  mode  to  'all',  which  requires  all  messages  to  be  screened  by  the 
Screener.  Screen  mode  is  checked  by  FSMGP  to  help  it  decide  whether  or 
not  a  particular  system  output  is  to  go  to  the  Screener. 

CES  must  first  examine  the  port  fsagn  (uniquely  identified  by  the  user's 
identification  appended  to  the  port  name)  to  see  if  the  Screener 
assignment,  the  bandwidth  rate,  or  the  screen  mode  has  been  changed.  If 
there  is  data  on  the  port,  the  appropriate  local  FSMGP  variables  are 
updated.  In  addition,  if  one  of  the  changes  involves  an  environmental 
value  (screen  mode  or  bandwidth),  the  user's  GENV  is  opened,  updated  to 
reflect  the  change(s),  and  closed.  If  there  is  no  data  on  the  port,  CES 
must  read  the  current  environment  values  from  GENV  and  set  the  appropri¬ 
ate  local  variables.  In  either  case,  CES  returns  to  FSMGP. 

STS 

The  Send  to  Screener  function  sends  a  downgrade  request  to  the  screener 
and  takes  appropriate  action  depending  on  the  Screener's  decision.  The 
function  actually  encompasses  several  logical  tasks,  but  has  common  entry 
from  several  places  in  FSMGP.  If  the  screen  mode  mandates  all  system 
output  must  be  screened,  or  if  the  screen  mode  is  normal  and  a  particular 
system  output  is  tagged  as  variable  by  its  matching  subcontext,  or  if  the 
screen  mode  is  normal  and  the  system  output  is  fixed  but  the  bandwidth 


When  a  downgrade  is  to  go  to  the  Screened  STS  writes  the  information  in 
the  local  buffer  GINFO  to  the  GINFO  file.  GINFO  is  the  downgrade  context 
buffer  and  is  updated  with  each  user  input  and  system  output.  The  GINFO 
file  allows  the  Screener  to  view  the  downgrade  material  in  context  to  the 
current  user/system  interactions.  STS  then  sends  a  request  message  to 
SCTP  via  the  port  screq.  This  port  is  uniquely  identified  to  SCTP  (so  it 
knows  where  to  send  the  reply)  by  STS  appending  the  Screener's  identifier 
to  the  port  name.  This  message  contains  the  name  of  the  user's  GDOWN, 
which  is  a  text  file  of  the  information  to  be  downgraded,  and  the  name  of 
the  user's  GINFO.  STS  then  waits  for  a  reply  to  the  downgrade  request. 
This  reply  is  delivered  on  the  port  fsrly,  uniquely  identified  by  appen¬ 
ding  the  user's  identifier  to  the  port  name.  If  the  Screener  accepted 
the  material,  STS  calls  the  global  function  GFAUDIT  to  record  that  fact 
on  the  audit  file  GFAUDIT.  STS  then  writes  the  information  in  GDOWN  to 
the  user  and  returns  to  FSMGP. 

If  the  Screener  rejected  the  downgrade  material,  STS  audits  that  fact  and 
sends  a  message  to  the  user  stating  the  decision.  STS  must  then  esta¬ 
blish  a  new  context  to  proceed.  This  is  accomplished  by  calling  a 
special  function  that  is  pointed  to  by  the  current  context.  Since  the 
particular  point  in  the  current  subsystem  is  implicit  in  the  current  con¬ 
text,  the  function  that  it  points  to  will  know  the  appropriate  action  to 
take  to  "pop-up"  FSMGP  to  a  level  from  which  to  proceed  safely.  The 
current  context  also  contains  a  pointer  to  another  context  appropriate  to 
the  special  function.  Therefore  STS  sets  a  new  context  and  calls  the 
special  function.  This  function  must  send  an  appropriate  simulated  user 


input  to  the  WWMCCS  system  to  resynchronize  FSMGP.  This  is  accomplished 
by  sending  a  canned  message  to  the  current  WWMCCS  subsytem  via  RNPE.  The 
special  function  then  records  the  fact  that  simulated  user  input  has  been 
sent  with  a  call  to  GFAUDIT. 

C8R 

The  Check  Bandwidth  Rate  function  determines  a  dynamic  rate  of  messages 
automatically  screened  by  FSMGP  and  compares  it  to  the  current  setting  of 
the  FSM-wide  rate.  If  the  dynamic  rate  is  greater  than  or  equal  to  the 
set  rate,  FSMGP  returns  this  fact  to  FSMGP  which  must  then  change  the 
screen  mode  of  its  user  to  "all".  If  the  dynamic  rate  is  less  than  the 
set  rate,  CBR  returns  this  fact  to  FSMGP  and  no  special  action  need  be 
taken. 

CBR  calculates  the  dynamic  rate  by  keeping  track  of  the  time  the  last 
system  output  was  sent  to  the  user  (the  last  invocation  of  CBR),  and  the 
number  of  system  outputs  automatically  bypassed  to  date.  If  the  time  the 
last  system  output  was  sent  to  the  user  was  sufficiently  long  ago 
(defined  by  some  default  time  set  at  FSM  initiation),  a  rate  is  calcula¬ 
ted  by  dividing  the  number  of  system  outputs  that  have  been  automatically 
screened  by  the  amount  of  time.  If  this  rate  is  greater  than  the 
system-wide  set  rate,  CBR  returns  that  value,  otherwise  CBR  returns 
nothing.  In  either  case  CBR  must  reinitialize  its  counters  before  retur¬ 
ning.  If  the  time  was  not  sufficiently  long  ago  to  calculate  a  rate,  no 
counters  are  changed  and  CBR  returns  nothing.  On  its  initial  invocation, 
CBR  establishes  its  counters  and  returns  nothing. 


LOGOFF 


The  LOGOFF  function  performs  clean-up  activities  when  the  user  logs  off 
the  WWMCCS  system.  It  must  make  sure  that  the  assignment  daemon  knows 
about  the  logoff.  LOGOFF  is  invoked  when  the  user  indicates  he  is  log¬ 
ging  off,  for  example  entering  'bye'.  When  this  occurs,  a  pointer  in  the 
context  with  the  user's  input  will  direct  FSMGP  to  execute  LOGOFF.  LOGOFF 
communicates  with  FASSD  over  its  port  FAPORT,  informing  it  that  the  user 
has  logged  off. 

3.2.2  Screener  Trusted  Program  (SCTP) 

The  Screener  Trusted  Program  (SCTP)  interfaces  directly  with  the  FSM 
Screener  when  the  Screener  logs  onto  FSM.  SCTP  is  responsible  for 
displaying  downgrade  information  to  the  Screener  in  order  for  the 
Screener  to  determine  if  the  information  to  be  written  down  to  the  low 
security  domain  of  FSM  contains  sensitive  high  security  level  data.  This 
information  is  presented  to  the  Screener  one  screen  at  a  time.  Any  time 
during  this  data  review  sequence  the  Screener  can  reject  the  data  for 
downgrading.  However,  the  entire  downgrade  file  must  be  displayed  to  the 
Screener  before  he  can  accept  it  for  downgrade.  An  additional  downgrade 
context  information  file  is  also  available  to  the  Screener  in  order  to 
assist  in  determining  if  the  downgrade  information  contains  sensitive 
data.  This  downgrade  context  file  contains  two  screen  fulls  of  informa¬ 
tion  reflecting  the  user/system  dialogue  just  prior  to  the  downgrade 
data.  This  data  can  be  perused  by  the  Screener  following  the  inspection 
of  the  downgrade  information.  During  the  perusal  of  the  downgrade 
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context  file/  the  Screener  can  accept/reject  the  downgrade  request, 


3. 2. 2.1  Global  Data  Usage.  SCTP  utilizes  the  following  FSM  global  data 
structures  in  performing  its  function: 


GLF  SCTP  updates  the  logon  file  (GLF)  when  a  Screener  logs  onto  FSM. 

GDOWN  SCTP  reads  in  the  downgrade  file  (GDOWN)  and  displays  its  contents 
to  the  Screener  for  review. 


GINFO  SCTP  reads  in  the  downgrade  context  information  file  (GINFO)  and 
displays  its  contents  to  the  Screener  for  review. 

Audit  Requests  SCTP  builds  audit  trail  requests  whenever  the  Screener 
logs  onto  FSM  and  when  the  Screener  begins  reviewing  a  downgrade 
request. 

3. 2. 2. 2  Local  Data  Usage.  SCTP  uses  no  pertinent  local  data  structures. 

3. 2. 2. 3  General  Processing  Flow.  The  Screener  Trusted  Program  (SCTP)  is 
invoked  when  a  FSM  Screener  logs  onto  FSM.  There  is  a  separate  copy  of 
SCTP  for  each  Screener  logged  onto  FSM.  As  soon  as  SCTP  is  initiated  it 
locks,  opens  and  reads  in  the  Global  Logon  File  (GLF),  updates  its  con¬ 
tents  reflecting  the  Screener  logon,  writes  GLF  out,  then  closes  and 
unlocks  the  file.  SCTP  audits  the  Screener  logon  event  via  the  global 
function  GFAUDIT. 


Following  Screener  registration  into  GLF,  SCTP  creates  its  screening 
request  port  based  on  the  Screener's  user  ID.  This  port  will  be  utilized 
in  receiving  screening  requests  from  the  zero  or  more  FSM  Guardian  Pro¬ 
cesses  assigned  to  this  Screener. 
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Next  SCTP  checks  the  screening  request  port  for  possible  screen  requests. 
If  requests  are  not  present  then  SCTP  outputs  to  the  Screener  a  set  of 
prompts  stating  that  there  are  no  pending  screening  requests  and  he  may 
log  out  if  he  wishes.  Then  SCTP  checks  for  both  Screener  logout  requests 
or  potential  screening  requests.  If  neither  event  occurs  for  some 
predetermined  time  SCTP  again  outputs  no  screening  request/ logout  prompts 
to  the  Screener.  This  sequence  continues  indefinitely  until  either  the 
Screener  logs  out  or  a  screening  request  appears. 

If  the  Screener  logs  out,  SCTP  deregisters  the  Screener  from  GLF  by  wri¬ 
ting  a  message  to  FASSD  via  its  port  (faport). 

If  a  screening  request  is  present  then  SCTP  notifies  the  Screener  with 
the  prompt  options  to  continue  with  the  screen  request  or  logout. 
Assuming  the  Screener  decides  to  continue  with  the  screen  request,  SCTP 
then  reads  in  the  downgrade  file  (GOOWN)  indicated  in  the  request  port 
message  and  displays  the  first  page  to  the  Screener.  Following  this  page 
of  data  are  one  of  two  possible  prompts:  If  this  is  not  the  only  page  of 
data  then  SCTP  prompts  the  Screener  with  a  reject/continue  option;  if 
this  is  the  first  and  last  page  of  downgrade  information,  SCTP  prompts 
the  Screener  with  accept/reject/continue  options.  For  the  first  situa¬ 
tion,  the  Screener  continues  screening  the  downgrade  information  by  con¬ 
tinuing  for  each  subsequent  page.  Following  complete  display  of  the 
downgrade  file,  the  Screener  has  the  option  of  viewing  a  downgrade  con¬ 
text  information  file  CGINFO).  This  is  accomplished  by  continuing  past 
the  downgrade  file.  For  each  page  of  context  data,  SCTP  prompts  the 


Screener  with  an  accept/reject/continue  option.  If  the  Screener  con¬ 
tinues  through  and  past  the  context  information  file,  SCTP  will  cycle 
back  to  the  downgrade  file,  ad  infinitum. 

During  the  above  sequence  the  Screener  will  eventually  either  accept  the 
downgrade  or  reject  it.  If  the  Screener  accepts  the  downgrade  request 
SCTP  requests  that  he  confirm  his  action.  If  the  Screener  does  not  con¬ 
firm  the  accept,  SCTP  continues  displaying  information  at  the  point  where 
it  left  off.  If  the  Screener  does  confirm  the  accept  action,  SCTP  noti¬ 
fies  the  appropriate  FSMGP  through  the  screening  reply  port  (fsrly-i). 
Then  SCTP  notifies  the  Screener  that  the  confirmation  has  been  acted  upon 
and  continues  at  the  beginning  of  its  cycle  looking  for  another  screening 
request. 

If  the  Screener  decides  to  reject  the  downgrade,  SCTP  requests  that  he 
confirm  the  rejection.  If  the  Screener  does  not  confirm  the  rejection, 
SCTP  continues  displaying  data.  If  the  Screener  confirms  the  rejection, 
SCTP  notifies  the  appropriate  FSMGP  of  the  rejection  through  the  screen¬ 
ing  reply  port  Cfsrly-i).  Then  SCTP  notifies  the  Screener  that  the 
rejection  has  been  acted  upon  and  then  proceeds  to  obtain  another  screen¬ 
ing  request. 

3. 2. 2. 4  Major  Functions.  Following  are  a  set  of  salient  functions 
important  to  SCTP  operation. 

SCUGLF 

The  Update  GLF  function  is  responsible  for  processing  the  Global  Logon 


File  (GLF).  This  function  operates  on  an  input  parameter  specifying  the 
Screener's  Logon  name.  It  Locks  GLF  (using  gLobaL  function  GFLOCK).  The 
Screener's  GLF  record  is  sought  and,  if  found,  is  checked  to  see  if  this 
Screener  is  currentLy  Logged  on.  If  so,  the  Screener  is  informed  and  his 
SCTP  terminates.  If  the  found  record  indicates  an  inactive  record  (not 
Logged-on),  SCTP  marks  it  active  and  updates  GLF  with  it  (the  fiLe  is 
stilt  write-Locked).  If  no  GLF  record  is  found  for  this  Screener,  he  is 
informed  and  his  SCTP  terminates.  The  GLF  file  is  unlocked  following 
this  sequence,  regardless  of  the  outcome  of  the  logon. 

SCPROMPT 

The  Screener  Prompt  function  is  responsbi le  for  determining  the  appropri¬ 
ate  user  prompt  based  on  the  current  state  of  SCTP.  Prior  to  outputting 
the  next  appropriate  prompt,  SCPROMPT  flushes  the  Screener's  terminal 
input  in  order  to  remove  superfluous  characters  that  the  Screener  may 
have  entered.  Then  SCPROMPT  determines  the  prompt  on  the  following  SCTP 
states.  If  the  current  SCTP  state  is  proceed,  then  valid  prompts  are 
"logout  (l)"  or  "continue  «CR>)";  if  the  current  state  is  continue,  then 
valid  prompts  are  "continue  (<CR>)"  and  "accept  (a)",  and  "reject  (r)". 
If  the  Screener  has  not  seen  all  downgrade  information  and  the  state  is 
continue,  then  "continue  «CR>)"  and  "reject  (r)"  are  valid  prompts.  If 
the  state  is  accept,  then  "confirm-yes"  and  "confirm-no"  are  valid 
prompts.  If  the  state  is  reject,  then  "confirm-yes"  and  "confirm-no"  are 
valid  prompts. 


3.2.3  FSM  Assignment  Daemon  (FASSD) 


The  FSM  Assignment  Daemon  (FASSD)  is  responsible  for  automatic  WES 
user/Screener  assignments  within  the  FSM.  The  Environment  Manager  (EM) , 
via  the  EMP,  can  manually  reassign  users  and  Screeners  as  desired. 
However,  since  the  EMP  is  not  always  expected  to  be  running,  FASSD  makes 
all  initial  assignments  as  WES  users  and  Screeners  log  on  and  off. 

3. 2. 3.1  Global  Data  Usage.  FASSD  uses  the  following  global  data  struc¬ 
tures: 

GLF  FSM  global  logon  file. 

GAEV  Current  audit  event  files. 

FSAGN-i  FSMGP  assignment  reply  port. 

FAPORT  FASSD  assignment  request  port. 

3. 2. 3. 2  Local  Data  Usage.  FASSD  uses  no  pertinent  local  data  struc¬ 
tures. 

3. 2. 3. 3  General  Process  Flow.  FASSD  is  a  daemon  which  is  initiated  at 
FSM  system  startup.  FASSD  reads  its  input  port,  faport,  for  an  IPC  mes¬ 
sage  and  blocks  on  it  if  empty.  If  there  is  at  least  one  port  message  in 
faport,  FASSD  reads  the  message  and  checks  the  message  type. 

IPC  messages  from  EMP  can  only  be  WES  user/Screener  reassignments  (SCCNG) 
followed  by  the  WES  user  ID  and  Screener  ID  to  reassign.  FASSD  reads  the 
Global  Logon  File  (GLF)  searching  for  the  WES  user  ID.  when  the  user's 
record  is  found,  the  Screener  ID  for  this  WES  user  is  changed  to  reflect 


the  new  Screener  that  the  EM  reassigned.  The  record  is  updated  in  GLF 
(after  GLF  is  Locked)  and  FASSO  generates  an  audit  event  indicating  a  WES 
user/Screener  assignment  has  taken  place.  FASSO  checks  its  port  for  more 
messages  and  if  none,  blocks. 

IPC  messages  originating  from  SCTP  can  either  be  Screener  Logon  (DKRDY) 
or  Screener  Logoff  (DRLGO),  followed  by  the  Screener  ID  and  (for  DRRDY 
messages  only)  the  Screener's  UNIX  terminal  ID.  If  the  port  message  is 
DRRDY,  FASSD  may  make  WES  user/Screener  assignments  if  this  is  the  only 
Screener  currently  logged  onto  FSM.  If  the  port  message  is  DRLGO,  FASSD 
searches  the  GLF  for  a  record  with  the  FSM  ID  the  same  as  the  passed 
Screener  ID  and  marks  the  record  inactive.  Then,  FASSD  searches  GLF 
looking  for  active  WES  users  which  are  assigned  to  this  Screener.  If 
there  are  any,  FASSD  uses  its  assignment  algorithm  to  reassign  WES  users 
to  other  Screeners.  If  there  are  no  other  Screeners  available,  FASSD 
sends  a  port  message  to  the  FSMGP  of  each  WES  user  denoting  that  no 
Screeners  are  available  (SCNAV).  FASSD  generates  an  audit  event  when  the 
Screener  logs  off  and  whenever  a  WES  user/Screener  assignment  occurs. 

IPC  messages  from  FSMGP  can  be  either  User  Logon  (UAREQ)  or  User  Logoff 
(UALGO)  followed  by  the  user  ID  and  terminal  ID.  Similar  to  SCTP  message 
types,  FASSD  searches  GLF  for  a  user  ID  that  matches  the  passed  user  ID. 
In  the  UAREQ  case,  FASSD  assigns  the  WES  user  to  a  logged-on  Screener,  if 
any.  FASSD  notifies  FSMGP  of  the  assignment  by  sending  a  Screener  Assig¬ 
ned  (SCASS)  message  and  the  assigned  Screener's  ID  to  the  FSMGP's  port, 
fsagn-i.  If  no  Screener  is  available,  FASSD  sends  the  SCNAV  message  to 


this  port.  An  audit  event  is  generated  if  an  assignment  occurs.  In  the 
UALGO  case,  FASSD  marks  the  WES  user's  GLF  record  inactive.  FASSD  gen¬ 
erates  an  audit  event  indicating  that  the  WES  user  has  logged  off  of  FSM. 

3. 2. 3. 3.1  Specification  of  Assignment  Algorithm.  Four  cases  need  to  be 
considered  with  the  assignment  algorithm: 


1.  Screener  Logs  On 


2.  Screener  Logs  Off 


3.  User  Logs  On 


A.  User  Logs  Off 
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3. 2. 3.3. 1.1  Screener  Logs  On.  FASSD  makes  no  assignment  changes  in  this 
case.  Even  though  there  may  be  a  heavy  load  on  another  Screener,  no 
users  are  automatically  assigned  to  the  new  Screener,  in  the  interest  of 
user/Screener  stability.  The  new  Screener  will  be  the  prime  candidate 
for  future  assignments  however. 


3. 2. 3. 3. 1.2  Screener  Logs  Off.  This  is  the  most  serious  case  since  it 
is  likely  that  at  least  one  WES  user,  and  possbily  more,  will  need  reas¬ 
signment.  If  no  other  Screeners  are  available,  the  port  message  No 
Screeners  Available  (SCNAV)  is  sent  to  each  FSMGP's  fsagn-i  port.  FSMGP 
allows  the  user  to  proceed  until  a  Screener  is  needed,  at  which  time  the 


ft 
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user  has  the  option  of  logging  off  or  waiting  for  either  a  Screener 
assignment  or  screen  mode  change  (via  the  EMP)  to  occur. 


If  other  Screeners  are  available,  FASSD  chooses  the  Screener  with  the 
smallest  current  load  (fewest  users  assigned)  to  reassign  the  user  to. 
This  step  may  be  repeated  multiple  times  in  order  to  reassign  all  WES 
users  who  were  assigned  to  the  logged-off  Screener.  Each  time,  the 
Screener  with  the  smallest  current  load  is  chosen.  In  the  case  of  ties 
(multiple  Screeners  with  the  same  load),  FASSD  chooses  the  Screener  who 
most  recently  logged  on.  This  is  done  because  the  most  recently  logged- 
on  Screener  will  probably  remain  logged-on  longer  than  the  other 
Screener(s).  This  scheme  requires  that  FASSD  record  the  Screener  logon 
DTG  in  a  local  data  structure  (following  a  DRRDY  port  message  from  a 
SCTP). 


3. 2. 3. 3. 1.3  User  Logs  On.  Similar  to  the  previous  case,  FASSD  chooses 
the  Screener  with  the  smallest  current  load  to  assign  the  WES  user  to. 
Ties  are  resolved  as  stated  above.  This  case  will  require  at  most  one 
assignment.  As  before,  there  may  be  no  Screeners  available. 

3. 2. 3. 3. 1.4  User  Logs  Off.  FASSD  makes  no  assignment  changes  when  a  WES 
user  logs  off.  The  reasoning  follows  that  discussed  in  "Screener  Logs 
On".  The  EM  may  manually  reassign  users  and  Screeners;  however,  in  the 
light  of  user/Screener  stability,  FASSD  makes  no  assignments. 


3.2.4  FSM  Audit  Daemon  (FAD) 


FAD  logs  audit  events  in  the  current  audit  files  based  on  requests  in  the 
audit  queue.  Audit  requests  are  processed  on  a  strict  FIFO  scheme. 
Audit  request  files  are  opened,  processed  and  unlinked  as  the  audit  event 
specified  is  actually  logged  in  the  audit  files. 

3. 2. 4.1  Global  Data  Used.  The  following  global  data  is  used  by  FAD: 

Audit  Request  Files  Contains  audit  events  to  log. 

AUDITQ  Directory  contains  all  audit  request  files. 

Current  Audit  File-Pair  Contains  logged  audit  events. 

GAUD  Audit  description  file. 

GAUD-LOCK  Write-lock  mechanism  for  audit  files. 

5. 2. 4. 2  Local  Data  Used.  FAD  uses  the  UNIX  file  status  buffer  returned 
oy  the  "stat"  call. 

3. 2. 4. 3  General  Process  Flow.  Due  to  the  large  volume  of  audit  events, 
FAD  is  implemented  as  a  daemon,  rather  than  a  callable  process  or  func¬ 
tion.  As  such,  it  has  no  input  or  output  parameters.  All  data  that  FAD 
uses  in  logging  an  audit  event  is  either  contained  in  the  audit  request 
file(s)  or  is  obtained  by  FAD.  FAD  will  sleep  for  30  seconds,  wake  up 
and  examine  its  queue,  "/fsm/fsat/auditq",  for  pending  requests.  If 
there  are  no  file  entries  in  the  Audit  Queue  directory,  FAD  returns  to 
the  sleep  state  and  repeats  this  process  again  upon  waking.  If  there  are 
pending  audit  requests,  FAD  must  find  their  filenames  and  Date-Time  Group 
(DTG)  of  last  modification.  The  filenames  and  DTGs  of  last  modification 
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are  entered  in  a  list  and  are  sorted  on  the  DT6  using  the  UNIX  qsort 
function.  The  filename  with  the  least  recent  last  modification  (the 
oldest  file)  appears  first  in  the  list,  followed  by  the  second  oldest 
file  and  so  on. 

FAD  locks  the  audit  files  (GAUD)  for  writing  by  calling  GFLOCK.  Then,  it 
opens  the  current  audit  file-pair  and  the  next  oldest  audit  request  file. 
FAD  increments  the  pointer  into  its  sorted  filename  list,  so  on  the  next 
pass  it  will  pick  up  the  next  oldest  file.  After  reading  the  event 
record  and  saving  it,  FAD  reads  the  text  record(s),  if  any,  and  copies 
them  byte-by-byte  to  the  current  Text  file;  remembering  the  beginning 
location  of  the  text  (OFFSET)  and  keeping  a  count  of  the  number  of  bytes 
transferred.  FAD  sets  up  the  event  record,  updates  it  (with  OFFSET  and 
LENGTH)  if  necessary,  and  writes  it  to  the  current  Event  file.  The  event 
has  now  been  logged,  so  FAD  closes  the  current  audit  file-pair.  FAD  sig¬ 
nifies  successful  event  logging  by  closing  and  unlinking  the  audit 
request  file  just  processed  from  the  audit  queue. 

FAD  must  update  the  Audit  Description  (GAUD)  file,  as  well,  with  the  new 
"last  entry"  DTG  for  the  current  audit  file-pair.  FAD  opens  GAUD  (the 
audit  files  are  still  write-locked),  locates  the  last  record  in  the  file 
and  reads  it  into  a  small  buffer.  The  DTG  of  last  entry  is  updated  and 
the  record  is  written  back  to  the  GAUD  file.  FAD  closes  and  unlocks  the 
audit  files  for  writing  by  calling  GFUNLOCK. 

If  there  are  any  files  left  in  the  sorted  list,  FAD  repeats  the  sequence 
described  above  until  there  are  no  files  left  in  the  list.  Then,  FAD 


re-examines  the  audit  queue  and  if  there  are  any  files,  continues  as 
described  above.  Otherwise,  FAD  will  sleep  before  repeating  this  entire 


process. 

3.2.5  Environment  Manager  Program  (EMP) 

The  Environment  Manager  Program  (EMP)  permits  monitoring  and  alteration 
of  the  FSM  operating  environment.  EMP  performs  manual  WES  user/Screener 
assignments,  profiles  WES  user's  status  and  modifies  FSM  screen  modes  and 
bandwidth  thresholds.  The  EMP  is  run  by  the  Environment  Manager  (EM). 

3. 2. 5.1  Global  Data  Usage.  EMP  uses  the  following  global  data: 

GENV  System  (default)  and  user's  environment  files. 

GLF  FSM  global  logon  file. 

GPROF  User  profile  file. 

3. 2. 5. 2  Local  Data  Usage.  The  following  local  data  is  used  by  EMP: 

1.  Screener  list  -  a  variable-length  list  whose  entries  each 
contain  a  one-byte  Screener  ID  and  an  eight-byte  Screener 
logon  name. 

2.  User  list  -  a  variable-length  list  whose  entries  each  contain 
a  one-byte  user  ID,  a  one-byte  Screener  ID  (who  the  user  is 
currently  assigned  to)  and  a  twelve-byte  WWMCCS  user  ID. 


3. 2. 5. 3  General  Process  Flow.  When  invoked  by  the  EM,  EMP  checks  the 
Global  Logon  File  (GLF)  to  verify  the  logon  name  that  was  entered  and  to 
ensure  that  the  EM  is  not  currently  logged  on.  Only  one  EMP  can  exist 
at  any  given  time,  and  therefore  only  one  EM  record  can  be  defined  in 
GLF.  If  the  EM  name  is  valid  and  not  logged  on,  EMP  marks  the  record  as 
active  and  updates  GLF  (after  locking  it  for  writing).  Then,  the  EMP 
help  file  is  displayed  which  briefly  describes  available  EMP  commands. 
Following  this  display,  the  EM  is  placed  at  the  EMP's  command  level,  sig¬ 
nified  by  an  asterisk  on  the  EM's  terminal.  EMP  commands  are  valid  at 
this  point.  See  Appendix  B  for  detailed  command  information. 

If  the  assignments  command  is  entered,  the  EMP  prints  the  current  list  of 
user/Screener  assignments.  This  is  done  by  reading  each  Global  Logon 

File  (GLF)  record  and  checking  the  Logged  Bit  Flag  (DlOGDON)  for  logged- 

* 

on  users.  Records  of  users  that  are  not  logged  onto  FSM  are  not  con¬ 
sidered.  For  each  active  (logged-on)  record,  EMP  also  checks  whether 
this  user  is  a  WES  user  or  a  Screener.  If  the  active  record  indicates  a 
WES  user,  the  FSM  user  ID,  user's  WWMCCS  user  ID  and  the  Screener  ID  are 
stored  in  the  user  list.  If  the  active  record  indicates  a  Screener,  the 
Screener  ID  and  the  Screener's  logon  name  are  stored  in  the  Screener 
list.  After  all  GLF  records  have  been  read,  EMP  checks  each  record  in 
the  Screener  list.  The  Screener  ID  of  each  record  in  the  Screener  list 
is  compared  with  each  Screener  ID  in  the  user  list.  When  a  match  is 
found  (there  may  be  more  than  one),  the  Screener  user  logon  name  from  the 
Screener  list  is  printed  on  the  EM's  terminal,  followed  by  the  user's 
logon  name  from  the  user  list.  Each  record  in  the  user  list  is  compared 


with  records  in  the  Screener  list.  For  each  Screener  list  record,  if  a 


match  occurs  a  flag  is  set.  After  all  user  list  records  have  been  com¬ 


pared  with  a  Screener  list  record,  the  flag  is  checked.  If  it  was  never 


set,  the  Screener  associated  with  this  Screener  list  record  is  not  assig¬ 


ned  to  any  users.  This  information  is  important  for  future  EM-directed 


WES  user/Screener  reassignments,  hence  the  Screener' s  user  logon  name 


from  the  Screener  list  is  printed  on  the  terminal  followed  by  the  string 


"-  none  assigned  -".  When  the  Screener  list  is  exhausted,  EMP  returns  to 


command  level. 


If  the  EM  enters  the  display  command  at  EMP  command  level,  EMP  prints  out 


current  system/user  environment  values.  Display  entered  without 


arguments  causes  the  current  system  environment  values  to  be  listed,  fol¬ 


lowed  by  the  current  environment  values  of  every  logged-on  WES  user.  If 


optional  names  follow  the  display  command,  they  must  be  names  of  logged- 


on  WES  users  or  the  keyword  "SYSTEM".  This  causes  EMP  to  only  display 


those  user's  status.  If  no  arguments  followed  the  command  name,  EMP 


reads  the  system  Global  Environment  (GENV)  file  and  displays  the 


bandwidth  threshold  and  the  WWMCCS  subsystem  screen  modes.  Additionally, 


EMP  reads  each  GLF  record  and  keeps  counts  of  the  number  of  logged-on  WES 


users  and  Screeners.  This  information  is  printed  out  on  the  terminal. 


Following  the  system  display,  each  GLF  record  is  read.  For  each  logged- 


on  WES  user,  the  user  ID  is  used  to  form  a  filename  of  the  form 


"/fsm/usr/user-i/genv".  This  file  contains  the  user's  current  environ¬ 


ment  values.  EMP  reads  it  and  displays  the  information  on  the  EM's  ter¬ 


minal.  When  all  GLF  records  have  been  read,  EMP  returns  to  the  command 
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Level.  If  optional  names  follow  the  display  command,  each  name  is  com¬ 
pared  with  the  string  "SYSTEM".  If  a  match  occurs,  the  procedure  descri¬ 
bed  above  for  displaying  system  environment  values  is  performed.  If  the 
name  does  not  match  "SYSTEM",  then  each  logged-on  WES  GLF  record  is 
checked  with  the  user  name.  If  there  is  no  match  for  a  name,  EMP  warns 
the  EM  and  requests  a  replacement  user  name.  If  there  is  none,  EMP  con¬ 
tinues  with  the  next  name  following  the  display  command,  otherwise,  it 
repeats  the  process  for  the  replacement  user  name.  Each  name  is  pro¬ 
cessed  identically  in  sequential  fashion.  The  WES  user's  GENV  file  is 
read  and  the  contents  formatted  for  display.  When  there  are  no  more 
names  remaining,  EMP  returns  to  the  command  level.  The  display  command 
has  a  limit  of  five  user  names  and  if  this  number  is  exceeded,  EMP  prints 
a  message  and  ignores  the  remaining  names. 

If  the  history  command  is  entered  at  the  command  level,  EMP  fork/executes 
the  Audit  Trail  Display  Program  (ATDP).  This  command  enables  the  EM  to 
view  previous  audit  events.  The  audit  event  information  may  aid  the  EM 
in  making  a  FSM  environment  change.  When  the  EM  terminates  ATDP  (by 
using  the  quit  command),  EMP  returns  to  the  command  level.  See  Appendix 
D  for  detailed  ATDP  command  formats. 

If  the  modify  command  is  entered  at  the  command  level,  EMP  parses  and 
saves  any  optional  arguments.  The  modify  command  has  both  long  and  short 
command  forms  and  depending  upon  which  is  used,  various  displays  and 
prompts  appear.  In  the  case  of  no  command  arguments,  EMP  prints  a  menu 
of  valid  modification  actions  and  then  prompts  the  EM  for  the  action 
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desired.  The  selected  action  then  causes  a  new  menu  to  be  displayed  and 
the  EM  is  prompted  to  enter  the  new  environment  value(s).  When  finished 
with  this  modification  action,  the  EM  is  returned  to  the  initial  menu 


which  details  modification  actions.  This  was  done  so  that  the  EM  can 
modify  multiple  values  with  one  modify  command.  If  command  arguments  are 
present,  they  are  parsed  syntactically  and  errors  cause  EMP  to  re-prompt 
for  the  bad  value(s).  When  the  modification  has  been  made,  in  this  case, 
the  EM  is  returned  to  the  command  level.  This  is  an  important  distinc¬ 
tion  between  the  long  and  short  command  forms.  The  short  form  enables 
multiple  changes  to  be  made  with  a  single  modify  command,  with  the  EM 
being  prompted  from  menus.  The  long  form  validates  the  command 
arguments,  modifies  the  desired  value(s)  and  returns  to  the  command 
level.  Except  for  this  external  distinction,  the  two  command  forms 
operate  identically.  If  the  system-wide  environment  values  are  modified, 
EMP  writes  the  new  values  in  the  system  Global  Environment  (GENV)  file. 
The  values  in  this  file  are  given  to  each  WES  user  at  logon.  To  alter 
currently  logged-on  user's  values,  a  port  message  CBRCNG  or  SMCNG)  is 
sent  to  each  FSMGP  noting  that  an  environment  value  has  changed  and  indi¬ 
cating  the  new  value(s).  System-wide  values  that  can  change  include 
bandwidth  threshold  and  subsystem  screening  status.  Notice,  EMP  does  not 
update  each  WES  user's  GENV  file.  Following  the  system-wide  change,  EMP 
generates  an  audit  event  which  details  the  change  and  new  values.  If  a 
specific  user's  environment  values  are  modified,  EMP  writes  a  port  mes¬ 
sage  to  the  user's  FSMGP,  via  the  fsagn-i  port,  noting  the  change  and  new 
value(s).  User  environment  values,  like  system-wide  values,  which  can  be 
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altered  are  bandwidth  threshold  and  subsystem  screening  modes.  Again, 
the  EMP  does  not  alter  the  WES  user's  GENV  file.  EMP  generates  an  audit 
event  which  details  the  change  and  new  values.  The  final  type  of  modifi¬ 
cation  that  can  occur  is  WES  user/Screener  reassignment.  EMP  verifies 
that  both  the  WES  user  and  Screener  specified  by  the  EM  are  logged  onto 
FSM.  If  they  are  not,  EMP  messages  and  re-prompts  for  user  names.  If 
ooth  names  are  valid  and  logged-on,  EMP  sends  a  port  message  (SCCNG),  via 
the  faport,  to  the  FSM  Assignment  Daemon  (FASSD)  indicating  the  user  ID 
and  Screener  ID  to  reassign.  There  is  no  communication  between  the 
user's  FSMUP  and  EMP  in  this  case.  EMP  returns  to  command  level  after 
the  port  message  has  been  sent.  Notice,  EMP  does  not  directly  reassign 
WES  users  and  Screeners  and  it  does  not  generate  an  audit  event. 

If  the  profile  command  is  entered  at  the  command  level,  EMP  displays  the 
WES  user's  profile.  Profile  followed  by  no  optional  command  arguments 
causes  EMP  to  read  the  GLF  and  for  each  logged-on  WES  user,  to  form  the 
filename  "/fsm/usr/user-i/gprof".  This  file  contains  the  last  wait  con¬ 
dition  for  this  user.  Additionally,  the  file  contains  the  WES  user's 
terminal  ID,  WWMCCS  subsystem  and  DTG  of  the  wait.  This  information  is 
displayed,  one  line  per  user,  on  the  EM's  terminal.  When  the  GLF  file 
has  been  exhausted,  the  EMP  returns  to  command  level.  If  optional  com¬ 
mand  arguments  follow  the  command,  EMP  checks  the  GLF  for  a  match  between 
each  argument  and  GLF  WES  user  names  (if  the  argument  is  longer  than  one 
byte)  or  GLF  terminal  IDs  (if  the  argument  is  a  single  byte).  If  no 
match  is  found,  the  EMP  prints  a  warning  message  and  the  EM  is  prompted 
for  a  replacement  name.  If  a  match  is  found,  the  user  ID  of  the  GLF 


record  is  used  to  form  the  filename  shown  above  and  the  file  contents  are 


formatted  and  displayed  on  the  EM's  terminal.  As  with  the  display  com¬ 
mand/  there  is  a  limit  of  five  names  following  the  command  and  remaining 
names  are  ignored  with  a  message. 

The  final  EMP  command  is  one  to  terminate  the  program.  Since  EMP  has  no 
input  ports  and  automatic  WES  user/Screener  assignments  are  performed  by 
the  FSM  Assignment  Daemon  (FASSD),  the  EMP  does  not  always  need  to  be 
running  during  FSM  operation.  If  the  EM  enters  the  quit  command,  EMP 
exits.  The  EMP  can  be  run  at  any  future  time  the  EM  desires. 

3.2.6  Audit  Trail  Display  Program  (ATDP) 

ATOP  performs  all  formatting  and  display  of  generated  audit  events.  It 
also  is  used  to  prevent  the  current  audit  file-pair  from  growing  to  an 
unmanageable  size.  ATDP  is  invoked  by  using  the  HISTORY  command  in  the 
Environment  Manager  Program  (EMP). 

3. 2. 6.1  Global  Data  Usage.  The  following  global  data  is  used  by  ATDP: 

Current  Audit  File-Pair  Contains  logged  audit  events. 

GAUD-LOCK  Audit  files  lock  mechanism. 

Saved  Audit  File-Pair(s)  Contains  previously  logged  audit  events. 

GAUD  Audit  description  file. 
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3. 2. 6. 2  Local  Data  Usage.  ATDP  does  not  use  any  pertinent  local  data 


3. 2. 6. 3  General  Process  Flow.  After  ATDP  has  prompted  the  EM  for  com¬ 


mand  input  (signified  by  ATDP  printing  a  ">"  on  the  EM's  terminal)  and 
has  read  it,  argument  parsing  begins.  This  is  a  major  phase  of  ATDP 
since  at  least  one  command  has  several  optional  variables,  with  many 
variables  also  taking  several  optional  arguments.  The  only  restrictions 
on  command  input  are  argument  ordering.  See  Appendix  D  for  detailed  com¬ 
mand  syntax  and  descriptions.  The  ATDP  command  name  is  always  the  first 
argument.  In  the  LIST  command,  the  flag  variable  is  always  second  (if 
present),  followed  by  the  event-name  (if  present)  and  the  time-range  (if 
present).  Several  non-fatal  errors  may  be  detected  during  this  parsing 
phase  and  if  an  unrecognizable  argument  is  decoded,  ATDP  prompts  for  the 
value  again  after  printing  a  warning  message  detailing  the  problem. 


If  the  command  to  ATDP  is  END,  ATDP  write-locks  the  audit  files  by  cal¬ 
ling  GFLOCK.  This  is  necessary  since  ATDP  renames  the  current  audit 
file-pair  and  updates  GAUD.  ATDP  renames  the  current  audit  file-pair 
from  "current"  to  the  DTG  of  the  END  operation.  For  example,  ENDing  the 
current  audit  file-pair  on  April  2  at  12:05:30  causes  a  rename  from 
"current. e"  to  "04021 20530. e"  for  the  Event  file  and  a  rename  from 
"current. t"  to  "04021 20530. t"  for  the  Text  file  to  take  place.  ATDP  then 
updates  GAUD  (audit  files  are  still  write-locked)  to  change  the  filename 
of  the  old  current  file  to  the  new  DTG  and  to  create  a  new  current  record 
with  the  filename  of  current  and  the  DTG  of  file  creation.  Then,  ATDP 
unlocks  the  audit  files  by  calling  GFUNL0CK. 
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If  the  command  is  QUIT/  ATOP  exits  back  to  the  Environment  Manager  Pro¬ 
cess  from  which  it  was  fork/executed. 

If  the  command  is  LIST/  ATOP  checks  the  second  argument  for  a  flag  value. 
If  it  is  a  flag  argument/  it  must  be  preceeded  by  a  The  flag  indi¬ 
cates  method  and  destination  of  the  output.  Methods  include  paging  and 
no  paging.  Destinations  include  terminal  and  printer.  If  the  second 
argument  is  preceeded  by  a  and  the  remaining  character  is  not  a  valid 
flag  argument/  a  warning  message  is  printed  and  the  flag  is  ignored. 

AT DP  checks  the  next  argument/  if  any,  for  an  event  name  keyword.  If  a 
valid  event  keyword  is  found/  and  there  is  no  valid  event  type  following 
it/  AT DP  prompts  the  user  for  a  list  of  event  types.  Otherwise/  ATDP 
decodes  the  event  type  and  sets  the  appropriate  internal  flags.  Event 
types  include  FSM  user  names/  WWMCCS  subsystem  names  and  event  codes. 
This  argument  serves  to  limit  ATDP  output  to  a  selected  subset. 

ATDP  checks  the  next  argument (s),  if  any,  and  expects  to  find  valid  time 
ranges  or  time  keywords.  A  time  range  is  a  numeric  string  indicating 
month,  day,  hour  and  minute  or  a  time  keyword.  If  the  remaining 
argument  (s)  are  not  valid  time  ranges/  a  warning  message  is  printed. 
ATDP  also  reprompts  the  user  for  the  correct  time  range.  Time  ranges/ 
like  event  types/  serve  to  limit  the  output  to  a  selected  subset  of 
events. 


Once  all  arguments  for  LIST  have  been  parsed/  validated  and  internal  pro¬ 
gram  flags  set/  ATDP  reads  the  GAUD  file  from  the  beginning/  searching 


for  the  first  audit  file-pair  whose  date  of  last  modification  is  greater 
than  the  LIST  start-time.  By  default/  the  start-time  is  midnight  on  the 
current  day.  Once  a  file  has  been  found/  ATDP  opens  it  for  read-only. 
Each  event  is  read  from  the  Event  file  and  its  FEVTIM  (DTG  of  the  event) 
is  compared  with  the  start-  and  end-times  to  list.  If  the  record  is 
within  the  specified  time  range/  ATDP  checks  the  event  name  condition(s)/ 
if  any.  By  default/  all  event  types  are  chosen.  If  the  event  record 
satisfies  the  event  name  condition(s)/  it  is  printed  out.  The  event's 
text/  if  any,  is  read  and  written  to  the  output  destination  in  a  byte- 
by-byte  fashion.  When  the  current  event  is  done/  ATDP  reads  the  next 
Event  file  record.  At  end  of  file/  ATDP  gets  the  next  audit  file-pair  in 
the  GAUD  file.  ATDP  stops  looking  for  next  event  records  (files)  when 


the  DTG  of  the  event  is  greater  than  the  end-time 


SECTION  4 


QUALITY  ASSURANCE 


This  section  is  not  applicable  to  this  document. 


APPENDIX  A 


FSM  CONTEXT  TABLES 


A.1  OVERVIEW 

The  Low-level  context  tables  which  are  used  by  the  FORSCOM  Security  Moni¬ 
tor  (FSM)  are  produced  from  high-level  files  created  with  the  UNIX  text 
editor,  ed.  A  C  program  named  Conbui Id  exists  which  makes  the  transfor¬ 
mation  from  the  human-oriented,  high-level  files  to  the  machine-oriented, 
low-level  files. 

Using  Conbui Id  offers  many  advantages  in  context  table  construction.  All 
labels  used  are  symbolic  and  thus  do  not  require  alteration  if  the  file 
is  changed.  Non-printing  ASCII  characters  can  be  easily  entered  and 
visually  checked.  In  addition  to  generating  correct  low-level  tables, 
Conbui Id  checks  and  verifies  high-level  values.  Errors  detected  in  the 
high-level  tables  can  be  quickly  pinpointed  and  corrected. 

Conbui Id  accepts  three  high-level  files  and  produces  three  low-level 
files:  context,  halting  delimiter  and  text.  The  formats  of  the  high- 
level  files  are  detailed  below.  The  halting  delimiter  and  text  files 
make  use  of  special  symbols  to  visualize  non-printing  or  hard  to  see 
characters.  Special  symbols  are  character  strings  preceeded  and  followed 


by  a  vertical  bar  ("|").  Conbuild  translates  the  special  symbols  into 
the  appropriate  character  sequence.  Special  symbols  include: 


1  1 

one  blank 

1  be  L 1 1 

terminal  bell 

|cr| 

carriage  return 

I C 1 1 -A | 

control-A 

Ilf  1 

line  feed 

I  n  L  | 

II 

new  line  (carriage  return 
null  byte 

line  feed) 


A. 2  CONTEXT 


The 

high-level 

context 

f  i  le 

follows 

this  format 

Cs 

Cp 

Oh 

bf 

ss 

Cpf  ] 

C ! comment] 

Ts 

Cn 

bf 

gs 

• 

gi 

Csf  ] 

C ! comment] 

Ts 

Cn 

bf 

■ 

• 

gs 

g<- 

Csf  ] 

C! comment] 

The 

first  line 

of  every 

context  is 

the  context 

header.  The 

1.  Cs  —  The  context  label 

This  symbolic  label  serves  to  identify  this  context.  It  can 
be  used  by  other  contexts  (as  a  pop-up  reference,  following 
an  abnormal  match)  and  subcontexts  (as  a  go-to  context,  fol¬ 
lowing  a  match). 

2.  Cp  —  Pop-up  context 


If,  during  normal  context  processing,  an  input  is  received 
from  the  use”  or  system  which  cannot  be  matched  in  any  of  the 


subcontexts,  a  "pop-up"  is  effected.  This  label  serves  to 
symbolically  identify  the  context  to  process  next,  in  the 
event  of  a  pop-up. 

Oh  —  Halting  delimiter  set 

The  halting  delimiter  set  is  identified  by  this  symbolic 
label.  It  is  an  offset  into  the  halting  delimiter  file  where 
the  desired  delimiter  set  can  be  found. 

bf  —  Context  header  bit  flags 

The  header  bit  flags  are  positional  and  represent  the  fol¬ 
lowing: 

i.  Source  of  next  input 

This  bit  flag  can  take  the  value  "U"  (user 
input),  "S"  (system  output)  or  "B"  (both).  This 
flag  identifies  the  location  of  the  next  input  to 
process.  In  the  degenerate  case  of  both,  polling 
is  done  and  the  first  input  received  is  pro¬ 
cessed. 

ii.  Length  of  next  input 

This  bit  flag  can  take  the  value  "R"  (repeating) 
or  "N"  (non-repeating).  In  the  case  of  multi- 


line  system  outputs,  such  as  bare  TCON  skeletons. 


multiple  reads  will  need  to  be  performed  to 
obtain  the  entire  output.  This  occurs  because 
the  read  function  stops  reading  when  a  halting 
delimiter  is  encountered.  One  logical  system 
output  may  contain  many  halting  delimiters. 

iii.  Matching  of  next  input 

This  bit  flag  can  take  the  value  "F"  (fixed)  or 
"V"  (variable).  The  flag  identifies  the  type  of 
matching  to  be  performed,  during  repeating  reads 
only.  This  flag  does  not  supercede  the  subcon¬ 
text  fixed/variable  bit  flag. 

iv.  Subsystem  entry  to  audit 

This  bit  flag  can  take  the  value  "A"  (audit)  or 
"N"  (no  audit).  The  flag,  if  "A",  causes  an 
audit  event  to  be  generated  that  records  the  fact 
that  a  new  WWMCCS  subsystem  was  entered. 

ss  —  Subsystem  name 

This  field  contains  the  name  of  the  WWMCCS  subsystem  which 
this  context  item  pertains  to.  The  field  is  used  for  audit 
purposes  when  the  audit  bit  flag  is  set. 
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pf  —  Pop-up  function  name 


This  optional  field/  if  present/  contains  the  name  of  a  C 
function  to  execute  which  will  simulate  user  input/  so  as  to 
effect  a  pop-up  to  the  pop-up  context. 

7.  ! comment 

An  exclamation  mark  followed  by  anything  can  appear  at  the 
end  of  any  context  header  line.  It  is  ignored  by  all  pro¬ 
grams.  All  comments  are  optional. 

Each  line  of  input  following  the  context  header  is  a  subcontext  item  that 
is  part  of  the  context  item.  The  fields  are: 

1.  Ts  —  Text  string  to  match  on 

This  symbolic  label  identifies  the  text  string  to  use  when 
matching  input.  It  is  an  offset  in  the  text  file  of  a  null- 
terminated  string. 

2.  Cn  —  Next  context  if  match  made 

If  this  subcontext's  text  matched  the  input/  use  this  sym¬ 
bolic  label  as  the  next  context  to  process.  It  is  an  offset 
in  the  context  file  of  a  context  item. 
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3.  bf  —  Subcontext  bit  flags 

The  subcontext  bit  flags  are  positional  and  represent  the 
following: 

i.  Type  of  matcning  to  perform 

This  bit  flag  can  take  the  value  "F"  (fixed)  or 
"V"  (variable).  The  value  determines  the  type  of 
matching  to  perform  on  the  input  received.  A 
fixed  match  compares  the  input  against  the  text 
string  byte-by-byte.  A  variable  match  compares 
the  text  string  against  the  input,  looking  for  a 
match  anywhere. 

ii.  All  or  partial  match 

This  bit  flag  can  take  the  value  "S"  (substring) 
or  "N"  (no-substring).  Used  in  combination  with 
the  previous  bit  flag,  it  denotes  whether  the 
entire  input  is  to  be  matched  against,  or  only 
part  of  it.  Fixed  no-substring  requires  that  the 
input  and  the  text  string  be  of  equivalent  sizes, 
order  and  each  byte  matches  (i.e.  an  exact 
match).  Fixed  substring  requires  that  a  small 
part  of  the  text  string  match  the  input  exactly. 
Following  a  match,  the  text  string  is  used  and 
not  the  input  that  was  received.  Variable  no- 

A  -  6 


substring  involves  no  matching  and  is  otherwise 


termed  a  "null  subcontext".  This  can  be  thought 
of  as  a  "wildcard"  and  will  match  any  input. 
Variable  substring  is  similar  to  fixed  substring, 
with  the  exception  that  the  input  is  used,  rather 
than  the  text  string. 

iii.  Special  function  necessary 

This  bit  flag  can  take  the  value  "F"  (function 
required)  or  "N"  (no  function  required).  This 
flag  denotes  whether  the  optional  field  "sf"  will 
be  present  or  not. 

iv.  Validity  of  input 


This  bit  flag  can  take  the  value  "V"  (valid 
input)  or  "I"  (invalid  input).  Following  a  match 
between  the  received  input  and  the  text  string, 
this  bit  is  checked  and  if  not  set,  the  input  is 
not  allowed  to  proceed  due  to  its  invalidity. 
This  occurs  in  subsystems  which  have  commands 


t 


i 


that  FSMGP  does  not  allow  to  be  used.  For  exam¬ 
ple,  the  TCON  OLD  command  is  a  valid  WWMCCS 
input,  but  is  not  part  of  the  subset  of  WWMCCS 
operations  that  FSM  allows. 
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v.  Source  of  input 

This  bit  flag  can  take  the  value  "U"  (user  input) 
or  "S'*  (system  output).  In  the  event  that  the 
header  bit  flag  was  "Both",  this  bit  flag  identi¬ 
fies  whether  this  subcontext  pertains  to  the 
received  input  or  not. 

vi .  Disposition  of  input  following  match 

This  bit  flag  can  take  the  value  "E"  (end  of 
current  input)  or  "B"  (beginning  of  next  input). 
Its  use  is  limited  to  variable  substring  matches 
and  serves  to  identify  whether  the  substring 
matched  is  part  of  the  current  input,  to  be  down¬ 
graded,  or  is  the  beginning  of  the  succeeding 
input.  The  flag  will  normally  be  "E",  signifying 
that  the  substring  matched  is  to  be  downgraded 
with  the  rest  of  the  input  received. 


gs  —  Start  of  fixed  substring  match 


This  field  pertains  only  to  fixed  suDstring  matches  and  in 
that  event,  gives  an  offset  into  the  text  string  to  use  in 
matching.  The  length  of  the  substring,  since  it  is  not 
null-terminated,  is  given  by  the  next  field,  "gl". 
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gl  —  Length  of  fixed  substring  match 

This  field  pertains  only  to  fixed  substring  matches  and  in 
that  event,  gives  a  length  from  the  start  of  the  substring  to 
use  in  matching.  In  the  event  that  the  substring  defined  by 
these  two  fields  is  matched,  the  input  received  is  discarded 
and  the  entire  text  string  is  used  as  the  input. 

sf  —  Special  function  name 

This  optional  field,  if  present,  contains  the  name  of  a  C 
function  which  can  be  to  perform  special  actions  in  regard  to 
the  input  received,  following  a  successful  match.  Initially, 
this  field  only  pertained  to  user  input  and  was  limited  to 
validating  complex  user  inputs  so  as  to  reduce  the  possible 
number  of  error  messages  received.  Since  that  time,  the  con¬ 
cept  has  been  generalized  to  include  system  output  as  well. 
The  special  function  can  implement  any  special  actions  that 
are  not  normally  performed  during  the  FSMGP's  processing 
loop. 

! comment 

An  exclamation  mark  followed  by  anything  which  appears  at  the 
end  of  a  subcontext  input  line  is  regarded  as  a  comment  and 
is  ignored  by  all  programs.  It  is  optional. 


Context  items,  which  include  the  single  context  header  followed  by  zero 
or  more  subcontext  items,  are  delimited  from  each  other  by  a  blank  line. 


A. 3  HALTING  DELIMITER 


The  halting  delimiter  file  follows  this  format: 


d1*d2*  ...  di' 


Each  halting  delimiter  set  contains  one  or  more  halting  delimiters.  Hal¬ 
ting  delimiters  are  delimited  from  each  other  by  a  special  character  that 
is  called  a  "pseudo-null".  This  character  will  be  recognized  as  a  meta¬ 
symbol  and  translated  to  a  null  byte  everywhere  it  is  encountered.  The 
pseudo-null  character  is  a  carret  ("“").  This  indirection  is  necessary 
due  to  the  editor's  inability  to  insert  nulls  in  a  file.  Each  halting 
delimiter  set  is  doubly  null-terminated. 


The  fields  in  a  halting  delimiter  set  are: 


1.  Ds  —  The  delimiter  set  label 


This  symbolic  label  is  used  in  the  context  file  as  a 
reference  to  a  delimiter  set. 
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dj  —  The  halting  delimiters 


i 


Each  halting  delimiter  is  null  terminated  and  can  contain  any 
meaningful  characters  that  are  legitimate  halting  delimiters. 
Typically,  halting  delimiters  will  be  new-lines  or  carriage 
returns. 


A  halting  delimiter  set  can  be  entered  on  a  single  line  or  on  multiple 
lines,  as  desired.  It  is  best  MOT  to  split  a  halting  delimiter  across 
new-lines,  however,  it  will  be  interpreted  correctly.  In  the  event 
multi-line  input  is  used,  following  the  new-line  there  must  appear  a  tab. 
This  serves  to  denote  that  the  set  is  not  yet  terminated,  as  well  as  pro¬ 
viding  a  visual  mnemonic  to  that  effect. 


Halting  delimiter  sets  are  delimited  from  each  other  by  a  blank  line. 


A. 4  TEXT  STRING 

The  text  string  file  follows  a  similar  format  to  the  halting  delimiter 


.♦M.vrt, 

fi  le. 

The  format  is: 

1 

Ts 

ttttttt  ...  ttt* 

or 

Ts 

ttt 

tttt 

a 

• 

S 

• 

• 

rj 

fl 

ttt* 
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% 

| 

g 


if 

i*  v 

k 

IS! 


IS' 


n 


ja 

1 


Each  text  string  contains  zero  or  more  characters  and  is  terminated  by 
the  “pseudo-null"  character,  as  described  above.  Each  text  string 
requires  a  unique  label  and  is  delimited  from  other  text  strings  by  a 
blank  line. 

The  fields  are: 

1.  Ts  —  The  text  string  label 

This  symbolic  label  identifies  the  text  string  and  is  used  in 
the  context  file.  It  must  be  unique. 

i.  t  —  The  text  string 

The  text  string  must  be  null-terminated  and  can  be  entered  on 
a  single  input  line  or  on  multiple  lines.  If  using  multi- 
line  input,  following  a  new-line  there  must  be  a  tab.  Simi¬ 
lar  to  the  halting  delimiter  file,  this  provides  an  indica¬ 
tion  that  the  text  string  is  not  terminated. 

A. 5  SOURCE  CONTEXT  TABLES 

Following  is  a  listing  of  the  source  context  files  for  the  teletypewriter 
and  wang  terminals  which  were  used  during  the  PROUD  SPIRIT  exercise. 


A. 5.1  Source  Context  File  (GCONT) 


The  context  file  which  follows  has  had  its  comments  truncated  to  eighty 


columns 

in 

order  to  fit  onto 

the  page 

.  All  essential  data  is  otherwise 

intact. 

Cl 

C999 

Dl 

SRVN 

LOGON 

outnup  !  begin  tty/wang  logon 

T2 

CIO 

VSNVSE 

0 

0 

*  ”1316400"  (line  number) 

T1 

CIO 

VNNVSE 

0 

0 

!  (anything  else) 

CIO 

C999 

D20 

SNVN 

LOGON 

outnup  !  system  prompts  for  subsystem 

T10 

C20 

VSNVSE 

0 

0 

!  "PROGRAM  NAME 

C20 

C999 

D40 

UNFN 

LOGON 

outnup  !  user  enters  subsystem 

T20 

C30 

FNNVUE 

0 

0 

i  ”tss” 

T21 

C200 

FNNVUE 

0 

0 

!  "tlcf” 

C30 

C999 

D30 

SNFN 

LOGON 

outnup  !  Begin  TSS  logon 

T30 

C40 

FNNVSE 

0 

0 

!  "TERMINAL  " 

C40 

C999 

01 

SNVN 

LOGON 

outnup  !  system  identifies  terminal 

T40 

C50 

VSFVSE 

0 

0 

termid  !  "nn"  (terminal  id) 

C50 

C999 

050 

SNFN 

LOGON 

outnup  !  system  prompts  for  userid 

T50 

C60 

FNNVSE 

0 

0 

!  "USER IDSPAS SWORD  ..." 

T51 

C999 

FNFVSE 

0 

0 

locked  !  "LOCKED"  (terminal  is  locked) 

C60 

C70 

040 

UNVN 

LOGON 

outnup  !  user  enters  userid 

T60 

C60 

VSNIUE 

0 

0 

!  <uid>$<pw>/scc/scc  Cinvalid] 

T61 

C90 

VSFVUE 

0 

0 

getuid  !  <uid>$<pw> 

C70 

C999 

040 

SR  FN 

LOGON 

outnup  !  system  re-prompts  for  userid 

T50 

C80 

FNNVSE 

0 

0 

!  "USER IDSPAS SWORD  ..." 

C80 

C999 

040 

UNVN 

LOGON 

outnup  !  user  enters  userid  (last  chan 

T60 

C80 

VSNIUE 

0 

0 

!  <uid>$<pw>/scc/scc  CinvalidJ 

T61 

C90 

VSFVUE 

0 

0 

getuid  !  <uid>S<pw> 

C90 

C999 

01 

SRFN 

TSS 

outnup  !  system  prompts  for  ident 

T90 

C100 

FNNVSE 

0 

0 

!  "IDENT?" 

Cl  00 

C999 

040 

UNVN 

TSS 

outnup  !  user  enters  identifier 

T100 

C110 

VSNVUE 

0 

0 

!  <ident> 

C110 

C999 

0110 

SNFA 

TSS 

outnup  !  system  responds  to  ident 

T110 

Cl  20 

FNNVSE 

0 

0 

T11Q 

C120 

VSNVSE 

0 

0 

Till 

C120 

FNNVSE 

0 

0 

Till 

C120 

VSNVSE 

0 

0 

T90 

Cl  00 

FNNVSE 

0 

0 

Cl  20 

C999 

040 

UNFN 

TSS 

T121 

Cl  30 

FNFVUE 

0 

0 

T122 

C130 

FNFVUE 

0 

0 

T123 

Cl  30 

FNFVUE 

0 

0 

T124 

C130 

FNFVUE 

0 

0 

T125 

Cl  30 

FNFVUE 

0 

0 

Cl  30 

C999 

0130 

SNFN 

TSS 

T130 

Cl  40 

FNNVSE 

0 

0 

T131 

Cl  40 

FNNVSE 

0 

0 

T132 

C110 

FNNVSE 

0 

0 

T133 

C1.10 

FNNVSE 

0 

0 

Cl  40 

C999 

D40 

UNFN 

TSS 

T121 

Cl  50 

FNNVUE 

0 

0 

T122 

Cl  50 

FNNVUE 

0 

0 

T123 

Cl  50 

FNNVUE 

0 

0 

T124 

C150 

FNNVUE 

0 

0 

T125 

Cl  50 

FNNVUE 

0 

0 

Cl  50 

C150 

D150 

SNVN 

TSS 

T150 

C160 

FNNVSE 

0 

0 

T151 

C160 

FNNVSE 

0 

0 

T150 

C160 

VSNVSE 

0 

0 

T132 

C130 

FNNVSE 

0 

0 

T133 

C130 

FNNVSE 

0 

0 

Cl  60 

C150 

D40 

UNVN 

TSS 

T160 

Cl  000 

FNNVUE 

0 

0 

T161 

C1000 

FNNVUE 

0 

0 

T162 

Cl  000 

FNNVUE 

0 

0 

T170 

C7000 

FNNVUE 

0 

0 

T163 

C7000 

VS  FVUE 

0 

0 

T164 

C6000 

FNNVUE 

0 

0 

T165 

C2000 

FNNVUE 

0 

0 

T166 

C90QQ 

FNNVUE 

0 

0 

T1 67 

C9000 

FNNVUE 

0 

0 

T168 

C990 

FNNVUE 

0 

0 

T171 

C7000 

FNNVUE 

0 

0 

T169 

C7000 

VS FVUE 

0 

0 

T172 

C9020 

FNNVUE 

0 

0 

T173 

C9020 

FNNVUE 

0 

0 

T174 

C9020 

FNNVUE 

0 

0 

T175 

C9020 

FNNVUE 

0 

0 

!  "CLASSIFICATION  OF  YOUR  OUTPUT?" 

!  "CLASSIFICATION  OF  YOUR  OUTPUT?"  + 

!  "classification  of  your  output?" 

1  "classification  of  your  output?"  + 

!  "IDENT?"  (previous  one  bad) 

outnup  !  user  enters  output  class 

getcls  !  uzz 

getcls  !  ufo 

getcls  !  czz 

getcls  !  szz 

getcls  !  swp 

outnup  !  system  responds  to  output  cla 
!  "CLASSIFICATION  OF  FILES  ...  " 

!  "classification  of  files  ...  " 

I  "ILLEGAL  CLASSIFICATION  CODE" 

!  "illegal  classification  code" 

outnup  !  user  enters  file  class 
!  uzz 
!  ufo 
!  czz 
!  szz 
!  swp 

outnup  i  system  responds  to  file  class 
!  "SYSTEM  ?"  (only) 

!  "SYSTEM  ?"  (after  pop-up) 

!  "SYSTEM  ?"  (preceded  by  message) 

!  "ILLEGAL  CLASSIFICATION  CODE" 

!  "illegal  classification  code" 

outnup  !  user  enters  TSS  subsystem 
!  acce  (ss) 

!  acces  (s) 

!  access 

!  list  (with  no  arguments) 
vumcl  !  list 

!  sios 
!  tcon 
!  wwdm  (s) 

!  wwdms 

!  bye  (logoff) 

!  listl  (with  no  arguments) 
vumcl  !  listl 

!  wwdm  n(ew) 

!  wwdms  n(ew) 

!  wwdm  new 
!  wwdms  new 


C200 

C999 

D30 

SNFN 

LOGON 

outnup 

!  Begin  TLCF  logon 

T30 

C210 

FNNVSE 

0 

0 

!  "TERMINAL  " 

C21U 

C999 

01 

SNVN 

LOGON 

outnup 

!  system  identifies  terminal 

T40 

C220 

VSFVSE 

0 

0 

termid 

!  "nn"  (terminal  id) 

C220 

C999 

050 

SNFN 

LOGON 

outnup 

I  system  prompts  for  userid 

T50 

C23Q 

FNNVSE 

0 

0 

!  "USER IDSPASS WORD  ..." 

T51 

C999 

FNFVSE 

0 

0 

locked 

!  "LOCKED"  (terminal  is  locked) 

C23Q 

C24Q 

040 

UNVN 

LOGON 

outnup 

!  user  enters  userid 

T60 

C230 

VSNIUE 

0 

0 

!  <uid>$<pw>/scc/scc  CinvalidJ 

T61 

C260 

VS F VUE 

0 

0 

getuid 

!  <uid>$<pw> 

C240 

C999 

040 

SRFN 

LOGON 

outnup 

!  system  re-prompts  for  userid 

T50 

C25U 

FNNVSE 

0 

0 

!  "USER ID$P ASS WORD  ..." 

C250 

C999 

040 

UNVN 

LOGON 

outnup 

!  user  enters  userid  (last  chan 

T60 

C250 

VSNIUE 

0 

0 

!  <uid>$<pw>/scc/scc  CinvalidJ 

T61 

C260 

VSFVUE 

0 

0 

getuid 

!  <uid>$<pw> 

C260 

C999 

Dl 

SRFN 

LOGON 

outnup 

!  system  prompts  for  ident 

T90 

C270 

FNNVSE 

0 

0 

[  "IDENT?" 

C270 

C999 

040 

UNVN 

LOGON 

outnup 

!  user  enters  identifier 

T100 

C280 

VSNVUE 

0 

0 

!  <ident> 

C280 

C999 

0110 

SNFA 

TLCF 

outnup 

* 

i  system  responds  to  ident 

T110 

C290 

FNNVSE 

0 

0 

!  "CLASSIFICATION  OF  YOUR  OUTPUT?" 

Till 

C290 

FNNVSE 

0 

0 

!  "classification  of  your  output?" 

T90 

C270 

FNNVSE 

0 

0 

!  "IDENT?"  (previous  one  bad) 

C290 

C999 

040 

UNFN 

TLCF 

outnup 

!  user  enters  output  class 

T121 

Cl 1000 

FNFVUE 

0 

0 

getcls 

!  uzz 

T122 

Cl 1000 

FNFVUE 

0 

0 

getcls 

!  ufo 

T123 

Cl 1000 

FNFVUE 

0 

0 

getcls 

!  czz 

T1 24 

C11000 

FNFVUE 

0 

0 

getcls 

!  szz 

T125 

C11000 

FNFVUE 

0 

0 

getcls 

!  swp 

C990 

C999 

D99Q 

SNVN 

TSS 

exit 

'  system  accounting  info 

T995 

C999 

VSNVSE 

0 

0 

j  "**on 

at  ..." 

T991 

C990 

FSNVSE 

0 

0 

!  "LINE 

TERMINATED  CP" 

C999 

C999 

0999 

SNVN 

TSS 

exit 

!  end  of  the  line  ! 

T1 

C999 

VNFVSE 

0 

0 

exit 

!  fsmgp  termination  ! 

Cl  000 

Cl  50 

01 000 

SNFA 

ACCESS 

outnup 

!  begin  access 

T1000 

C1020 

FNNVSE 

0 

0 

!  "FUNCTION?" 

Cl 01 0  C15Q  01QOQ  SNFN 


ACCESS  outnup  !  system  prompt  for  2nd+  passes 


T1Q00 

C1020 

FNNVSE 

0 

0 

Cl  020 

Cl  50 

D40 

UNFN 

ACCESS 

T1020 

C1030 

FNNVUE 

0 

0 

T1021 

Cl  030 

FNNVUE 

0 

0 

T1022 

Cl  50 

FNNVUE 

0 

0 

T1023 

Cl  50 

FNNVUE 

0 

0 

Cl  030 

Cl  50 

D1030 

SRFN 

ACCESS 

T1030 

C1040 

FNNVSE 

0 

0 

Cl  040 

C150 

D40 

UNVN 

ACCESS 

T1040 

C1050 

VNFVUE 

0 

0 

T1023 

C1050 

FNNVUE 

0 

0 

Cl  050 

Cl  50 

D1050 

SNFN 

ACCESS 

T1050 

Cl  060 

FNNVSE 

0 

0 

T1U51 

C1030 

VSNVSE 

0 

0 

Cl  060 

C150 

D40 

UNVN 

ACCESS 

T1040 

C1070 

VNNVUE 

0 

0 

T1023 

C1010 

FNNVUE 

0 

0 

T1060 

Cl  060 

VSNIUE 

0 

0 

Cl  070 

C150 

D1050 

SNFN 

ACCESS 

T1070 

Cl  080 

FNNVSE 

0 

0 

T1051 

C1050 

VSNVSE 

0 

0 

C1080 

C150 

D40 

UNVN 

ACCESS 

T1040 

C1090 

VNNVUE 

0 

0 

Cl  090 

C150 

D1050 

SNFN 

ACCESS 

T1090 

Cl  100 

FNNVSE 

0 

0 

T1051 

Cl  070 

VSNVSE 

0 

0 

Cl  100 

C150 

D40 

UNVN 

ACCESS 

T1040 

Cl  200 

VNNVUE 

0 

0 

Cl  200 

Cl  50 

D1200 

SNFN 

ACCESS 

T1 200 

C1210 

FNNVSE 

0 

0 

T1201 

Cl  090 

FNNVSE 

0 

0 

C121Q 

Cl  50 

040 

UNVN 

ACCESS 

T1040 

C1220 

VNNVUE 

0 

0 

Cl  220 

C150 

01050 

SNVN 

ACCESS 

T1220 

C1230 

FNNVSE 

0 

0 

T1051 

Cl  200 

VSNVSE 

0 

0 

!  "FUNCTION?" 

outnup  !  user  enters  acecess  function 
!  mf  (modify  file) 

!  fm  (file  modify) 

!  done 

!  <carriage  return> 

outnup  !  prompt  user  for  catalog 
!  "CATALOG  STKUCTURE  TO  WORKING  LEVEL?" 

outnup  !  user  inputs  catalog  string 
vumcl  !  <cat  string> 

!  <carriage  return>  (only) 

outnup  !  system  prompts  for  file 
!  "FILE  TO  BE  MODIFIED?" 

!  "ERR-FIELD  STARTING  WITH... TOO  LONG" 

outnup  !  user  enters  file  name 
!  <f i lename> 

!  <carriage  return> 

!  /  CinvalidD 

outnup  !  system  prompts  for  new  file  n 
!  "NEW  NAME?" 

!  "ERR-FIELD  STARTING  WITH... TOO  LONG" 

outnup  !  user  enters  new  file  name 
!  <new  f i lename> 

outnup  !  system  prompts  for  file  size 
!  "NEW  MAX  SIZE  IN  LLINKS?" 

!  "ERR-FIELD  STARTING  WITH... TOO  LONG" 

outnup  !  user  enters  file's  new  size 
!  <new  file  size> 

outnup  !  system  prompts  for  new  passwo 
!  "NEW  PASSWORD?" 

!  "ERR— MAX  SIZE  ILLEGALLY  STATED" 

outnup  !  user  enters  new  password 
!  Knew  password> 

outnup  !  system  prompts  for  general  pe 
!  "GENERAL  PERMISSIONS?" 

!  "ERR-FIELD  STARTING  WITH. ..TOO  LONG" 


Cl  230  Cl  50  D40 


UNFN 


ACCESS  outnup  !  user  enters  general  permissio 


T1230 

Cl  240 

FNNVUE 

0 

0 

T1231 

C1240 

FNNVUE 

0 

0 

T1232 

Cl  240 

FNNVUE 

0 

0 

T1233 

Cl  240 

FNNVUE 

0 

0 

T1234 

Cl  240 

FNNVUE 

0 

0 

T1235 

Cl  240 

FNNVUE 

0 

0 

T1236 

C1240 

FNNVUE 

0 

0 

T1237 

Cl  240 

FNNVUE 

0 

0 

T1238 

C1240 

FNNVUE 

0 

0 

T1239 

Cl  240 

FNNVUE 

0 

0 

T1023 

Cl  240 

FNNVUE 

0 

0 

C124U 

Cl  50 

D1240 

SNVN 

ACCESS 

T1240 

C1250 

FNNVSE 

0 

0 

T1051 

C1220 

VSNVSE 

0 

0 

Cl  250 

Cl  50 

D40 

UNVN 

ACCESS 

T1250 

Cl  300 

VSNVUE 

0 

0 

T1251 

Cl  300 

VSNVUE 

0 

0 

T1252 

C1300 

VSNVUE 

0 

0 

T1253 

Cl  300 

VSNVUE 

0 

0 

T1254 

Cl  300 

VSNVUE 

0 

0 

T1255 

C1300 

VSNVUE 

0 

0 

T1 256 

C1300 

VSNVUE 

0 

0 

T1257 

Cl  300 

VSNVUE 

0 

0 

T1258 

Cl  300 

VSNVUE 

0 

0 

T1259 

Cl  300 

VSNVUE 

0 

0 

T1023 

Cl  300 

FNNVUE 

0 

0 

Cl  300 

Cl  50 

Dl  300 

SNFN 

ACCESS 

T1240 

C1250 

FNNVSE 

0 

0 

T1300 

C1310 

FNNVSE 

0 

0 

T1301 

C1320 

FNNVSE 

0 

0 

T1302 

Cl  240 

FNNVSE 

0 

0 

T1051 

C1240 

VSNVSE 

0 

0 

T1303 

C1010 

VSNVSE 

0 

0 

C1310 

C150 

D40 

UNVN 

ACCESS 

T1040 

Cl  300 

VNNVUE 

0 

U 

Cl  320 

C150 

D581 

SNFN 

ACCESS 

T1320 

Cl  060 

FNNVSE 

0 

0 

C2000 

C2004 

0510 

SNVA 

TCON 

T2002 

C2010 

FNNVSE 

0 

0 

T2020 

Cl  50 

VSNVSE 

0 

0 

C2001 

C2004 

0501 

SNFN 

TCON 

T2Q01 

C2010 

FNNVSE 

0 

0 

!  read 
!  r  (read) 

!  execute 
!  e  (execute) 

!  write 
!  w  (write) 

!  append 
!  a  (append) 

!  modify 
!  m  (modify) 

!  <carriage  return> 

outnup  !  system  prompts  user  for  speci 
!  "SPECIFIC  PERMISSIONS?" 

!  "ERR-...”  (several  types) 

outnup  !  user  inputs  specific  permissi 
!  read/ 

!  r/  (read) 

!  write/ 

!  w /  (write) 

!  append/ 

!  a/  (append) 

!  execute/ 

!  e/  (execute) 

!  modify/ 

!  m/  (modify) 

!  <carriage  return>  (end  specific  permi 

outnup  !  response  to  above  permissions 
!  "SPECIFIC  PERMISSIONS?" 

!  "MORE?" 

!  "SUCCESSFUL." 

!  "ERR “PERMISSIONS  ILLEGALLY  STATED" 

!  "ERR-..."  (several  types) 

!  "REQUEST  DENIED-" 

outnup  !  user  enters  more  names 
!  (anything) 

outnup  !  system  prompts  for  file  name 
!  "FILE  TO  BE  MODIFIED?" 

outnup  !tcon  startl 

!<all>TC0N  VERSION  6.3,  JUNE  1976<SPXC 

! NO  TEMPORARY  FILE  SPACE  CODE 

outnup  !tcon  first  question 
! <al 1>FUNCTI0NAL  AREA? 
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C2003 

C2004 

040 

UNFN 

TCON 

T2100 

C2001 

FNNVUE 

0 

0 

C2004 

C2004 

0509 

SNVN 

TCON 

T150 

C160 

FNNVSE 

0 

0 

T150 

C160 

VSNVSE 

0 

0 

T2000 

C2003 

FNNVSE 

0 

0 

C2010 

C2004 

040 

UNFN 

TCON 

T2030 

C2020 

FNNVUE 

0 

0 

T2Q40 

C4020 

FNNVUE 

0 

0 

T2100 

C150 

FNNVUE 

0 

0 

C2015 

C2015 

0509 

SNVN 

TCON 

T150 

C160 

FNNVSE 

0 

0 

T150 

C 160 

VSNVSE 

0 

0 

T2000 

C2016 

FNNVSE 

0 

0 

T2201 

C2070 

FNNVSE 

0 

0 

C2016 

C2015 

D40 

UNFN 

TCON 

T2100 

C2017 

FNNVUE 

0 

0 

C2017 

C2015 

0501 

SNFN 

TCON 

T2001 

C2018 

FNNVSE 

0 

0 

C2018 

C2015 

040 

UNFN 

TCON 

T2030 

C2020 

FNNVUE 

0 

0 

T204Q 

C4020 

FNNVUE 

0 

0 

T2100 

C150 

FNNVUE 

0 

0 

C2020 

C2015 

0520 

SNFN 

TCON 

T2110 

C2030 

FNNVSE 

0 

0 

T2110 

C2030 

VSNVSE 

0 

0 

T2190 

C2020 

FNNVSE 

0 

0 

T2200 

C2070 

FNNVSE 

0 

0 

T2201 

C2070 

FNNVSE 

0 

0 

T2120 

Cl  50 

FNNVSE 

0 

0 

C2030 

C2015 

040 

UNVN 

TCON 

T213Q 

C202Q 

FNNVUE 

0 

0 

T214Q 

C2020 

FNNVUE 

0 

0 

T2640 

C3000 

FNNVUE 

0 

0 

T2645 

C3000 

FNNVUE 

0 

0 

T2162 

C2800 

VS  FVUE 

0 

0 

T2160 

C2800 

VSFVUE 

0 

0 

T2180 

C2042 

FNNVUE 

0 

0 

T2181 

C2042 

FNNVUE 

0 

0 

T2100 

C150 

FNNVUE 

0 

0 

C2042 

C2015 

0530 

SNFN 

TCON 

outnup  !user  hits  <nl> 

!<atl><CR> 

outnup  !back  to  system  or  top 
! SYSTEM  ? 

! SYSTEM  ?  preceded  by  message 
! TCON  VERSION  6.3,  JUNE  1976 

outnup  !user  input  functional  area 

!<all>fs 

!<all>dem 

!<all><CR> 

outnup  tback  to  system,  top  or  type? 
•SYSTEM  ? 

! SYSTEM  ?  preceded  by  message 
! TCON  VERSION  6.3,  JUNE  1976 
!<CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 

outnup  !user  hits  <nl> 

!  <CR> 

outnup  itcon  first  question 
! FUNCTIONAL  AREA? 

outnup  iuser  input  functional  area 
!  fs 
!  dem 
!<CR> 

outnup  ! system  asks  for  old  or  new 

!<c2010(t2030)>0LD  OR  NEW- 

!OLD  OR  NEW- 

! <  c2Q30 ( t2 1 40 ) >RE  AD Y 

!  <al  ixcrxnlxnlxcrxnl>transaction  T 

!<allXCRXNL>  TRANSACTION  TYPE  ?<SP 
•FUNCTIONAL  AREA  BUSY 

outnup  iuser  response  to  old  or  new 
!<all>new<CR> 

! <al l>n<CR> 

!<all>old<CR> 

!<al l>o<CR> 

vumc2  !<all>old  <fi lename> 
vumc2  !<all>o  <f i lename> 

! <al l>same<CR> 

!<al l>s<CR> 

!<allXCR> 

outnup  !sys  resp  to  same 


T2210 

C2020 

FNNVSE 

0 

0 

T2190 

C2800 

FNNVSE 

0 

0 

C2050 

C2015 

0510 

SNVN 

TCON 

T2002 

C2018 

FNNVSE 

0 

0 

T2020 

C150 

VSNVSE 

0 

0 

C2070 

C2015 

D40 

UNVN 

TCON 

T2290 

C2692 

FNNVUE 

0 

0 

T2300 

C2692 

FNNVUE 

0 

0 

T2310 

C2692 

FNNVUE 

0 

0 

T2320 

C2692 

FNNVUE 

0 

0 

T2330 

C2692 

FNNVUE 

0 

0 

T2340 

C2692 

FNNVUE 

0 

0 

T2350 

C2692 

FNNVUE 

0 

0 

T2360 

C2692 

FNNVUE 

0 

0 

T2370 

C2692 

FNNVUE 

U 

0 

T2380 

C2692 

FNNVUE 

0 

0 

T2390 

C2692 

FNNVUE 

0 

0 

T2400 

C2692 

FNNVUE 

0 

0 

T2410 

C2692 

FNNVUE 

0 

0 

T2420 

C2692 

FNNVUE 

0 

0 

T2430 

C2692 

FNNVUE 

0 

0 

T2440 

C2692 

FNNVUE 

0 

0 

T2450 

C2692 

FNNVUE 

0 

0 

T2460 

C2692 

FNNVUE 

0 

0 

T2470 

C2692 

FNNVUE 

0 

0 

T2480 

C2692 

FNNVUE 

0 

0 

T2490 

C2692 

FNNVUE 

0 

0 

T2500 

C2692 

FNNVUE 

0 

0 

T2510 

C2692 

FNNVUE 

0 

0 

T2512 

C2692 

FNNVUE 

0 

0 

T2514 

C2692 

FNNVUE 

0 

0 

T2516 

C2692 

FNNVUE 

0 

0 

T2518 

C2692 

FNNVUE 

0 

0 

T2519 

C2692 

FNNVUE 

0 

0 

T3030 

C990 

FNNVUE 

0 

0 

T2100 

C2050 

FNNVUE 

0 

0 

T2540 

C2072 

VSNVUE 

0 

0 

T2520 

Cl  50 

FNNVUE 

0 

0 

T2610 

C2071 

FNNVUE 

0 

0 

T2612 

C2071 

FNNVUE 

0 

0 

T2611 

C2071 

VSFVUE 

0 

0 

T2613 

C2071 

VSFVUE 

0 

0 

T2640 

C3000 

FNNVUE 

0 

0 

T2162 

C2800 

VSFVUE 

0 

0 

T2550 

C2072 

FNNVUE 

0 

0 

T2555 

C2072 

FNNVUE 

0 

0 

T2560 

C2072 

FNNVUE 

0 

0 

T2630 

C2075 

FNNVUE 

0 

0 

!<aLl>YOU  PRESENTLY  00  NOT  HAVE  A  CURRE 
! READY 

outnup  !tcon  start2 
! TCON  VERSION  6.3,  JUNE  1976 
! NO  TEMPORARY  FILE  SPACE  CODE 

outnup  !user  input  transaction  type 

!<c2020(t220Q)>a 

•<c2020(t2200»a  a 

!<c2020(t2200»aa1 

! <c2020 (t2200>  >d 

! <c2020(t2200)>e 

!<c2020(t220Q)>h 

!j 

!k 

Jkal 

!L 

!m 

!n 

!p 

!r-1 

!r-2 

!r11 

!  r12 

!aa4 

1  ka2 

!t 

!  v 

!  x 

!z  a 
!  jsb 
!j  b 
!n  a 
!  n  b 
!  xxx 

!<c2040>bye 

!<c2040  c2072  c2020(t2201 )><CR> 

!<c2040  c2072>dele(te)  <transaction> 
!<c2040>done<CR> 

!<c2040> li st<CR> 

! List  L<CR> 

vumcl  !<c2040>List  <f i Lename> 
vumcl  I  list L  <f i lename> 
!<c2072(t2202)>old<CR> 
vumc2  !old  <f i Lename> 

!<c2Q72>remove  clearfiles 
!<c2072  c2G40>remov  clearfiles 
!<c2040  c2Q72>remo  clearfiles 
! <c2072 (t2202)>resave<CR> 
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fv 


T2631 

C2075 

FNNVUE 

0 

0 

!<c2072(t2202)>resa<CR> 

T2632 

C2077 

VSFVUE 

0 

0 

vumc2  !<c2Q77>resave  <f i lename> 

T2633 

C2077 

VSFVUE 

0 

0 

vumc2  !<c2Q77>resa  <f i lename> 

T2580 

C2072 

VSNVUE 

0 

0 

!<c2Q74> rese(quence) 

T2600 

C2074 

VSNVUE 

0 

0 

!<c202Q(t2200)  c2072(t2202)>retr 

C2071 

C2015 

0506 

SNVN 

T  CON 

outnup  !sys  resp  to  list 

T2280 

C2072 

FNNVSE 

0 

0 

!<all>peady 

T2281 

C2072 

VSNVSE 

0 

0 

! ready  preceded  by  data/error 

C2072 

C2072 

01 000 

SNFN 

T  CON 

outnup  isys  resp  after  ready(list),  re 

T2201 

C2070 

FNNVSE 

0 

0 

!<c2070(t2540)XCRXNL>  TRANSACTION 

T2202 

C2070 

FNNVSE 

0 

0 

!<c2Q6Q  c2Q70(t2560,t2555,t2550,t2580) 

C2074 

C2072 

0599 

SNVN 

TCON 

outnup  !sys  resp  after  retr 

T2250 

C2072 

FNNVSE 

0 

0 

« <CRXNL>ILLEGAL  PARAMETER<SPXSPXSP> 

T2202 

C2070 

VSNVSE 

0 

0 

! <al LXCRXNL>TRANSACTION  TYPE  ?<SPXSP 

C2075 

C2072 

0581 

SNFN 

TCON 

outnup  {file  name  for  resave 

T2211 

C2076 

FNNVSE 

0 

0 

! <al IXCRXNL>FILE  NAME?<SP> 

C2076 

C2072 

040 

UNVN 

TCON 

outnup  !user  input  file  name 

T2100 

C2072 

FNNVUE 

0 

0 

!<allXCR> 

T21U0 

C2077 

VSFVUE 

0 

0 

vumcl  !<alixfi  lename> 

C2077 

C2072 

0502 

SNVN 

TCON 

outnup  ! sys  resp  to  file  name 

T2221 

C2072 

FNNVSE 

0 

0 

!<c2070Ct2633)XCRXNLXNL>ERR“FILE  NAM 

T2202 

C2070 

VSNVSE 

0 

0 

!<c2076  c 2070  (t2632)><CRXNL>TRANS ACTIO 

C2080 

C2691 

0560 

SRFN 

TCON 

outnup  'a  skeleton 

T2660 

C2690 

FNNVSE 

0 

0 

!<all>a  skeleton 

C21U0 

C2691 

0560 

SRFN 

TCON 

outnup  !a  a  skeleton 

T2670 

C2690 

FNNVSE 

0 

0 

!<all>a  a  skeleton 

C2120 

C2691 

0560 

SRFN 

TCON 

outnup  !aa1  skeleton 

T2680 

C2690 

FNNVSE 

0 

0 

Jaal  skeleton 

C214Q 

C2691 

0560 

SRFN 

TCON 

outnup  !d  skeleton 

T2690 

C269Q 

FNNVSE 

0 

0 

!<all>d  skeleton 

C2160 

C2691 

0560 

SRFN 

TCON 

outnup  !e  skeleton 

T2700 

C2690 

FNNVSE 

0 

0 

!<all>e  skeleton 

C2180 

C2691 

0560 

SRFN 

TCON 

outnup  !h  skeleton 

T2710 

C2690 

FNNVSE 

0 

0 

!<all>h  skeleton 

C2200 

C2691 

0560 

SRFN 

TCON 

outnup  !j  skeleton 

T2720 

C2690 

FNNVSE 

0 

0 

!<all>skeleton 

ft 


M 


A  -  20 


■-'i 


C2220 

T2730 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !k  skeleton 
!<all>skeleton 

C2240 

T2740 

C2691 

C2690 

1)560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !ka1  skeleton 
!<al l>skeleton 

C2260 

T2750 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !l  skeleton 
!<all>skeleton 

C2280 

T2760 

C2691 

C2690 

D560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !m  skeleton 
!<all>skeleton 

C2300 

T2770 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !n  skeleton 
! <all>skeleton 

C2320 

T2780 

C2691 

C2690 

D560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !p  skeleton 

1 <al l>skeleton 

C2340 

T2790 

C2691 

C2690 

D560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !  i — 1  skeleton 
!<all>skeleton 

C2360 

T2800 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !r-2  skeleton 
! skeleton 

C2380 

T2810 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !r11  skeleton 
! skeleton 

C2400 

T2820 

C2691 

C269Q 

D560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !r12  skeleton 
l skeleton 

C2420 

T2830 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !aa4  skeleton 
! skeleton 

C2440 

T2840 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !ka2  skeleton 
! skeleton 

C2460 

T2850 

C2691 

C2690 

D560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !t  skeleton 
! skeleton 

C2480 

T2860 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !v  skeleton 
! skeleton 

C2500 

T2870 

C2691 

C2690 

D560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !x  skeleton 
! skeleton 

C2520 

T2880 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !z  a  skeleton 
! skeleton 

C254U 

T3140 

C2691 

C2690 

0560 

FNNVSE 

SRFN 

0 

TCON 

0 

outnup  !jsb  skeleton 
! skeleton 

A  -  21 


C2560 

C2691 

D560 

SRFN 

TCON 

T3150 

C2690 

FNNVSE 

U 

0 

C2580 

C2691 

0560 

SRFN 

TCON 

T3160 

C2690 

FNNVSE 

0 

0 

C2600 

C2691 

0560 

SRFN 

TCON 

T3170 

C2690 

FNNVSE 

0 

0 

C2620 

C2691 

0560 

SRFN 

TCON 

T3180 

C2690 

FNNVSE 

0 

0 

C2690 

C2691 

0550 

SNFN 

TCON 

T307U 

C2700 

FNNVSE 

0 

0 

C2691 

C2710 

0560 

SRVN 

TCON 

T2050 

C2691 

VSNVSE 

0 

0 

C2692 

C2710 

0560 

SRVN 

TCON 

T3070 

C2700 

VSNVSE 

0 

0 

C2700 

C2710 

040 

UNVN 

TCON 

T3030 

C990 

FNNVUE 

0 

0 

T3040 

C2800 

FNNVUE 

0 

0 

T2520 

Cl  50 

FNNVUE 

0 

0 

T2610 

C2730 

FNNVUE 

0 

0 

T2612 

C2730 

FNNVUE 

0 

0 

T2640 

C3000 

FNNVUE 

0 

0 

T2550 

C2710 

FNNVUE 

0 

0 

T2555 

C2710 

FNNVUE 

0 

0 

T2560 

C2710 

FNNVUE 

0 

0 

T2630 

C2711 

FNNVUE 

0 

0 

T2631 

C2711 

FNNVUE 

0 

0 

T3011 

C2700 

FNNIUE 

0 

0 

T3012 

C2700 

FNNIUE 

0 

0 

nooo 

C2720 

FNNVUE 

0 

0 

T30U1 

C2720 

FNNVUE 

0 

0 

T2890 

C2720 

FNNVUE 

0 

0 

T3020 

C2720 

FNNVUE 

0 

0 

T3021 

C2720 

FNNVUE 

0 

0 

T3010 

C2710 

FNNVUE 

0 

0 

T2100 

C2720 

FNNVUE 

0 

0 

T2960 

C2720 

VSNVUE 

0 

0 

T2540 

C2800 

VSNVUE 

0 

0 

T2541 

C2700 

VSNIUE 

0 

0 

T2940 

C2720 

VSNVUE 

0 

0 

T2980 

C2720 

VSNVUE 

0 

0 

T2547 

C2700 

VSNIUE 

0 

0 

T2611 

C2730 

VSFVUE 

0 

0 

T2613 

C2730 

VSFVUE 

0 

0 

outnup  !j  b  skeleton 
! skeleton 

outnup  !n  a  skeleton 
! skeleton 

outnup  !n  b  skeleton 
! skeleton 

outnup  !xxx  skeleton 
! skeleton 

outnup  lend  of  skeletons 
! <c2Q8Qc21 00c21 20c21 40c21 60  21 80c2200c2 

outnup  Iremnants  of  skeleton  after  <br 
!<CRXNL> 

outnup  ivariable  skeleton 
! <c2070(t2290t2300t2310t2320t2330t2340) 

outnup  !user  skeleton  data  entry 
! <c271 0 ( t2050) c2720 (t3070)>bye 
!<c2690  c2710(t2050)c3071>d  (done  with 
! <c269Q>done<CR> 

! <c2710(t2050)c3071>list<CR> 

!<c3071  (t3070»listl<CR> 

!  <c2692c2710(t2050»old<CR> 

!<c2692c2721 Ct3070)> remove  clearfiles 
!<c2710(t2050)>remov  clearfiles 
!<c2710(t2050)>remo  clearfiles 
! resave<CR> 

! resa<CR> 

!<c2710(t2050)>system<CR> 

!<c27Q1 (t2050)>syst<CR> 

! <c2710(t2050)>test<CR> 
!<c2710Ct2050)>t<CR> 

!<c2690>tn<CR> 

! <c2720(t3070) c2732>xmi t<CR> 
!<c2710(t2050)>x<CR> 

! <c269Q  c2720 (t3070) c3071 >*<CR> 

!<c2690  c271Q(t2050)XCR> 

! <c2710(t2050) c2690>backward 
! <c2692c3071>dele(te) 

! <al  l>feed(back) 

!<c2721 (t3080)>forward 
! <c2710(t2050)c2721 (t3070)>get<SP> 
!<all>help 

vumcl  !<c2720(t3070)>list  <filename> 
vumcl  !<c2710(t2050)>listl  <fi lename> 


T2542 

C2700 

VSNIUE 

0 

0 

! <al l>next 

T2543 

C2700 

VSNIUE 

0 

0 

!<all>nofe(ed) 

T2162 

C2800 

VSFVUE 

0 

0 

vumc2  !<c2692c2721(t3080>c3071>old  <f 

T2544 

C2700 

VSNIUE 

0 

0 

!<all>pass 

T2545 

C2700 

VSNIUE 

0 

0 

! <all>rewi (nd> 

T2546 

C2700 

VSNIUE 

0 

0 

!<all>skip 

T2548 

C2700 

VSNIUE 

0 

0 

! <all>voca(bulary) 

T2632 

C2713 

VSFVUE 

0 

0 

vumc2  ! resave  <f i lename> 

T2633 

C2713 

VSFVUE 

0 

0 

vumc2  !resa  <filename> 

T2580 

C2710 

VSNVUE 

0 

0 

!<al l>rese(quence) 

T2600 

C2731 

VSNVUE 

0 

0 

*  <c2692c271Q(t205Q> c2721  (t3080>  c3071 >re 

T2161 

C2710 

VSNVUE 

0 

0 

!<c2690>ol  <f i lename> 

T2981 

C2720 

VSNVUE 

0 

0 

!<c2721 <3070)>g<SP> 

T2160 

C2710 

VSNVUE 

0 

0 

!<c2690>o  <f i lename> 

T2891 

C2710 

VSNVUE 

0 

0 

!<c2690>tn 

T2910 

C2710 

VSNVUE 

0 

0 

!<c2720(t3070)>C 

T2060 

C2710 

VSNVUE 

0 

0 

! 0<SP> 

T2061 

C2710 

VSNVUE 

0 

0 

!1<SP> 

T2062 

C2710 

VSNVUE 

0 

0 

I 2<SP> 

T2063 

C2710 

VSNVUE 

0 

0 

! 3<SP> 

T2064 

C2710 

VSNVUE 

0 

0 

! 4<SP> 

T2065 

C2710 

VSNVUE 

0 

0 

! 5<SP> 

T2066 

C2710 

VSNVUE 

0 

0 

! 6<SP> 

T2067 

C2710 

VSNVUE 

0 

0 

! 7<SP> 

T2068 

C2710 

VSNVUE 

0 

0 

! 8<SP> 

T2069 

C2710 

VSNVUE 

0 

0 

! 9<SP> 

T2961 

C2720 

VSNVUE 

0 

0 

!<c2721  (t3070)>b 

T2941 

C2720 

VSNVUE 

0 

0 

!<c2721Ct307U)>f 

C2710 

C2710 

D570 

SNVN 

TCON 

outnup  !sys  resp  to  skel  data  entry 

T2050 

C2700 

FNNVSE 

0 

0 

!<c2800c2730 (t2281 ) c2731 ( t2240t2250) c26 

T3060 

C271Q 

FNNVSE 

0 

0 

l<c2700(t2160t3010)XCRXNL>INVAHD  COM 

T3050 

C2715 

VSNVSE 

0 

0 

!  DATA  TRUNCATED<SP> 

C2711 

C2710 

0581 

SNFN 

TCON 

outnup  !sys  resp  to  resave 

T2211 

C2712 

FNNVSE 

0 

0 

!<c27Q0(t2631»FILE  NAME?<SP> 

C2712 

C2800 

040 

UNVN 

TCON 

outnup  !user  Input  filename 

T2100 

C2710 

FNNVUE 

0 

0 

!<allXCR> 

T2100 

C2713 

VNFVUE 

0 

0 

vumcl  KallXfi  lename> 

C2713 

C2710 

0539 

SNVN 

TCON 

outnup  !sys  resp  to  filename 

T2270 

C2714 

FNNVSE 

0 

0 

!<CRXNL>DATA  SAVED- 

T2196 

C2710 

VSNVSE 

0 

0 

!  FILE  * < f i  lename>'  DOES  NOT  EXIST— USE 

T2220 

C2710 

VSNVSE 

0 

0 

!<CRXNLX50>FIUE  <filename>  —  INCORRE 

T2221 

C2710 

FNNVSE 

0 

0 

!<CRXNLXNL>ERR-FILE  NAME  >8  CHARACTER 

T2224 

C2710 

VSNVSE 

0 

0 

!  <CRXNLXNL>ERR-'<character>'  IS  AN  IL 

T2225 

C2710 

VSNVSE 

0 

0 

!<CRXNLXNL>ERR-FIELO  STARTING  WITH  '< 

C2714 

C2710 

0560 

SNVN 

TCON 

outnup  lend  of  data  saved  msg 

A  -  23 
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wm 


T2100 

C2700 

VNNVSE 

0 

0 

C2715 

C2710 

D40 

UNVN 

TCON 

T2100 

C2710 

VSNVUE 

0 

0 

C2720 

C2710 

0580 

SNVN 

TCON 

T2240 

C2710 

VSNVSE 

0 

0 

T2657 

C2721 

FNNVSE 

0 

0 

T2658 

C2721 

VSNVSE 

0 

0 

T2659 

C2721 

VSNVSE 

U 

0 

T3090 

C3060 

FNNVSE 

0 

0 

T3090 

C3060 

VSNVSE 

0 

0 

T3060 

C2710 

FNNVSE 

0 

0 

C2721 

C2710 

D560 

SRVN 

TCON 

T3070 

C2700 

VSNVSE 

0 

0 

T3080 

C2700 

VSNVSE 

0 

0 

C2730 

C2800 

0506 

SNVN 

TCON 

T2280 

C2710 

FNNVSE 

0 

0 

T2281 

C2710 

VSNVSE 

0 

0 

C2731 

C2800 

D598 

SNVN 

TCON 

T2205 

C2733 

FNNVSE 

0 

0 

T2240 

C2710 

VSNVSE 

0 

0 

T2250 

C2710 

FNNVSE 

0 

0 

T2657 

C2732 

FNNVSE 

0 

0 

T2658 

C2732 

VSNVSE 

0 

0 

C2732 

C2800 

0560 

SRVN 

TCON 

T3070 

C2700 

VSNVSE 

0 

0 

C2733 

C2731 

040 

UNFN 

TCON 

T2290 

C3070 

FNNVUE 

0 

0 

T2300 

C3070 

FNNVUE 

0 

0 

T2310 

C3070 

FNNVUE 

0 

0 

T2320 

C3070 

FNNVUE 

0 

0 

T2330 

C3070 

FNNVUE 

0 

0 

T2340 

C3070 

FNNVUE 

0 

0 

T2350 

C3070 

FNNVUE 

0 

0 

T2360 

C3070 

FNNVUE 

0 

0 

T237U 

C3070 

FNNVUE 

0 

0 

T2380 

C3070 

FNNVUE 

0 

0 

T2390 

C3070 

FNNVUE 

0 

0 

T2400 

C3070 

FNNVUE 

0 

0 

T2410 

C3070 

FNNVUE 

0 

0 

T2420 

C3070 

FNNVUE 

0 

0 

T2430 

C3070 

FNNVUE 

0 

0 

T2440 

C3070 

FNNVUE 

0 

0 

T2450 

C3070 

FNNVUE 

0 

0 

!<fi  lenameXCRXNL> 

outnup  !  |cr|* 

[anything 

outnup  !  ?  “E|cr||nl|*R  | cr | | nl | “LEVE 
•TRANSACTION  xxxxxx  NOT  IN  CURR  FILE<SP 
!  <c2700(t2980t2981)xCRXNL>spaces<CRX 
•TRANSACTION  SEQUENCE  NUMBER  <CRXNL> 

! <c2700 (t2960t2961 t2940t2941 )>ERROR  MES 
!<c2700(t3020) TRANSACTION  SENT.  NEXT?< 
[TRANSACTION  SENT.  NEXT?<SP> 
[<CRXNL>INVALID  COMMAND  AT  THIS  LEVEL< 

outnup  !  |cr||nl|“ 

! <c2720 Ct2657t2659) >END  OF  TRANSACTION 
!  <c2720  (t2659t2657)>MORE - <CRXNL 

outnup  !sys  out  of  List 
! ready 

!<c2700(t2610t2611t2612t2613)>ready  pre 

outnup  !  | cr | | nl | “TYPE 
!<c2700(t2600)>INVALlD  TRANSACTION  TYPE 
!<c27Q0(t2600> TRANSACTION  xxxxxx  NOT  I 
!<c2700(t2600)XCRXNL>ILLEGAL  PARAMETE 
[<CRXNL>spaces<CRXNL>TNC000010spacesT 
<  <cZ700(t2600) TRANSACTION  SEQUENCE  NUM 

outnup  !  <CRXNL> 

[<c2731 (t2658)>END  OF  TRANSACTION  <CR> 

[user  enters  tran  type 

[<c2731>a 

! <c2731>a  a 

!  aal 

!d 

!e 

!  h 

!  j 

!  k 
!  kal 
!  L 
!m 
!  n 
!  P 
!  i — 1 

!  r-2 
!  rll 
!  r12 


T2460 

C307Q 

FNNVUE 

0 

0 

T2470 

C3070 

FNNVUE 

0 

0 

T2480 

C3070 

FNNVUE 

0 

0 

T2490 

C3070 

FNNVUE 

0 

0 

T2500 

C3070 

FNNVUE 

0 

0 

T2510 

C3070 

FNNVUE 

0 

0 

T2512 

C3070 

FNNVUE 

0 

0 

T2514 

C3070 

FNNVUE 

0 

0 

T2516 

C3070 

FNNVUE 

0 

0 

T2518 

C3070 

FNNVUE 

0 

0 

T2519 

C3070 

FNNVUE 

0 

0 

C2800 

C4004 

0540 

SNVN 

TCON 

T2110 

C2990 

FNNVSE 

0 

0 

T2110 

C2990 

VSNVSE 

0 

0 

T2190 

C2800 

FNNVSE 

0 

0 

T2200 

C3060 

FNNVSE 

0 

0 

T2200 

C3060 

VSNVSE 

0 

0 

T2201 

C3060 

FNNVSE 

0 

0 

T2201 

C3060 

VSNVSE 

0 

0 

T2222 

C2800 

FNNVSE 

0 

0 

C2990 

C4004 

D40 

UNVN 

TCON 

T2130 

C2020 

FNNVUE 

0 

0 

T2140 

C2020 

FNNVUE 

0 

0 

T2640 

C3000 

FNNVUE 

0 

0 

T2645 

C3000 

FNNVUE 

0 

0 

T2162 

C2800 

VS  FVUE 

0 

0 

T2160 

C2800 

VSFVUE 

0 

0 

T2180 

C2992 

FNNVUE 

P 

0 

T2181 

C2992 

FNNVUE 

0 

0 

T2100 

Cl  50 

FNNVUE 

0 

0 

C2992 

C4004 

D530 

SNFN 

TCON 

T2210 

C2800 

FNNVSE 

0 

0 

T2190 

C2800 

FNNVSE 

0 

0 

C3000 

C2800 

D581 

SNFN 

TCON 

T3110 

C3010 

FNNVSE 

0 

0 

C3Q10 

C2800 

D40 

UNVN 

TCON 

T2100 

C2800 

FNNVUE 

0 

0 

T2100 

C2800 

VNFVUE 

0 

0 

C3060 

C2710 

D40 

UNVN 

TCON 

T2290 

C3070 

FNNVUE 

0 

0 

T2300 

C3070 

FNNVUE 

0 

0 

T2310 

C3070 

FNNVUE 

0 

0 

T2320 

C3070 

FNNVUE 

0 

0 

T2330 

C3070 

FNNVUE 

0 

0 

!  aa4 
!ka2 
!  t 
!  v 
!  x 

!  z  a 
!  jsb 
!j  b 
in  a 
in  b 
!  xxx 

outnup  ivariable  tran  type 
•OLD  OR  NEW- 
!OLD  OR  NEU- 

! <c2700(t2162)c3010c306Q(t21 62)>READY 
!  <c28Q0XCRXNLXNLXCRXNL>TRANS  ACTION 
!<CRXNLXNLXCRXNL>TRANSACTION  TYPE  ? 
!<c2700Ct2540t3040>  c2992  c2800(t2190)c 
!  <CRXML>  TRANSACTION  TYPE  ?<SPXSP> 
!<CRXNL>ERR-FILE  NAME  >8  CHARACTERS 

outnup  iuser  response  to  old  or  new 
!new<CR> 

!n<CR> 

!old<CR> 

!o<CR> 

vumc2  iold  <filename> 
vumc2  !o  <filename> 

!same<CR> 

! s<CR> 

!  <CR> 

outnup  isys  resp  to  same 
! YOU  PRESENTLY  DO  NOT  HAVE  A  CURRENT  FI 
! <c299Q(t2180)>READY 

outnup  iold  file  path 

•<c2030  c2070(t2640)  c2700(t2640>  c3060 

outnup  iuser  input  old  filename 
!<CR> 

vumcl  !<filename> 

outnup  iuser  input  transaction  type 

! <c2800(t2200t2201 ) c3062 (t2202)>a 

!<c2800Ct2201 )>a  a 

!<c2800(t2201)>aa1 

!<c2800(t2201 )>d 

!<c2800(t2201)>e 


T2340 

C3070 

FNNVUE 

0 

0 

T2350 

C3070 

FNNVUE 

0 

0 

T236Q 

C3070 

FNNVUE 

0 

0 

T2370 

C3070 

FNNVUE 

0 

0 

T2380 

C3070 

FNNVUE 

0 

0 

T2390 

C3070 

FNNVUE 

0 

0 

T2400 

C3070 

FNNVUE 

0 

0 

T2410 

C3070 

FNNVUE 

0 

0 

T2420 

C3070 

FNNVUE 

0 

0 

T2430 

C3070 

FNNVUE 

0 

0 

T2440 

C3070 

FNNVUE 

0 

0 

T2450 

C3070 

FNNVUE 

0 

0 

T2460 

C3070 

FNNVUE 

0 

0 

T2470 

C3070 

FNNVUE 

0 

0 

T2480 

C3070 

FNNVUE 

0 

0 

T2490 

C3070 

FNNVUE 

0 

0 

T2500 

C3070 

FNNVUE 

0 

0 

T2510 

C3070 

FNNVUE 

0 

0 

T2512 

C3070 

FNNVUE 

0 

0 

T2514 

C3070 

FNNVUE 

0 

0 

T2516 

C3070 

FNNVUE 

0 

0 

T2518 

C3070 

FNNVUE 

0 

0 

T2519 

C3070 

FNNVUE 

0 

0 

T3Q10 

C3070 

FNNVUE 

0 

0 

T3030 

C990 

FNNVUE 

0 

0 

T2100 

C4000 

FNNVUE 

0 

0 

T2540 

C3062 

VSNVUE 

0 

0 

T2520 

C150 

FNNVUE 

0 

0 

T2610 

C3061 

FNNVUE 

0 

0 

T2612 

C3061 

FNNVUE 

0 

0 

T2611 

C3061 

VSFVUE 

0 

0 

T2613 

C3061 

VSFVUE 

0 

0 

T2640 

C3000 

FNNVUE 

0 

0 

T2162 

C2800 

VSFVUE 

0 

0 

T2550 

C3062 

FNNVUE 

0 

0 

T2555 

C3062 

FNNVUE 

0 

0 

T2560 

C3062 

FNNVUE 

0 

0 

T2630 

C3063 

FNNVUE 

0 

0 

T2631 

C3063 

FNNVUE 

0 

0 

T2632 

C3065 

VS  FVUE 

0 

0 

T2633 

C3065 

VSFVUE 

0 

0 

T2580 

C3062 

VSNVUE 

0 

0 

T26QQ 

C3070 

VSNVUE 

0 

0 

C3061 

C4004 

0506 

SNVN 

TCON 

T2280 

C3062 

FNNVSE 

0 

0 

T2281 

C3062 

VSNVSE 

0 

0 

C3062 

C3062 

01000 

SNFN 

TCON 

T2201 

C3060 

FNNVSE 

0 

0 

! <c28Q0(t2201 )>h 
!<c2800(t2201 )>j 
!k 

!ka1 

•  l 
!m 
!n 
!p 

•  r-1 

« i — 2 

i  rll 
!  r12 
!aa4 
!  ka2 
!  t 
!  v 
!  x 

!  z  a 
!  jsb 
!j  b 
!n  a 
!n  b 
!  xxx 
J* 

!<c2042  c3062(t2201t2202»bye 
!  <c2800  (t2201 )  c3062  (t2202»<CR> 

! <c3062 (t2202) >de Le (te)  <t ransact i on> 

!  <c2720c2800  ( t2201  »done<CR> 

! <c2800(t2201 )>  List<CR> 

!<c2800(t2201  )>list  KCR>  i 

vumcl  !<c2800(t2201 )>List  <f i lename> 
vumcl  !<c3062(t2202)>listl  <f i lename> 
!<c3062(t2202)>old<CR> 
vumc2  !<c3067>old  <filename> 

! <c3062(t2201 )>remove  cLearfiles 
!<c3062(t2202)>remov  cLearfiles 
J<c3062(t2202)>remo  cLearfiles 
!<c2720>resave<CR> 

!<c3062 (t22Q2)>  resa<CR> 

vumc2  ! resave  <f i Lename> 

vumc2  !resa  <f  i  Lename>  jj 

!<c3062(t2202)>rese(quence)  | 

! <c2800 Ct2200t2201 )c3062 (t2202»retr  | 

outnup  !sys  resp  to  List  1 

I<c3060(t2610)>ready  j 

!<c3060(t2610t2612  t2613)>ready  precede  l 

outnup  !sys  resp  after  ready(list),  re  j 
!<c3060(t2540)c307U(pop)><CRXNL>  TR  { 


T2202 

C3060 

FNNVSE 

0 

0 

C3063 

C3062 

D581 

SNFN 

TCON 

T2211 

C3064 

FNNVSE 

0 

0 

C3064 

C3062 

040 

UNVN 

TCON 

T2100 

C3062 

FNNVUE 

0 

0 

T2100 

C3065 

VNFVUE 

0 

0 

C3065 

C3062 

D502 

SNVN 

TCON 

T2202 

C3060 

VSNVSE 

0 

0 

T2221 

C3062 

FNNVSE 

0 

0 

C3070 

C3062 

D598 

SNVN 

TCON 

T2230 

C3060 

FNNVSE 

0 

0 

T2205 

C2733 

FNNVSE 

0 

0 

T2240 

C3062 

VSNVSE 

0 

0 

T2250 

C3062 

FNNVSE 

0 

0 

T2657 

C3071 

FNNVSE 

0 

0 

T2658 

C3071 

VSNVSE 

0 

0 

C3071 

C2691 

D560 

SRVN 

TCON 

T3070 

C2700 

VSNVSE 

0 

0 

C4000 

C4004 

D510 

SNVN 

TCON 

T2002 

C4010 

FNNVSE 

0 

0 

T2020 

C150 

VSNVSE 

0 

0 

C4001 

C4004 

D501 

SNFN 

TCON 

T2001 

C4010 

FNNVSE 

0 

0 

C4003 

C4004 

D40 

UNFN 

TCON 

T2100 

C4Q01 

FNNVUE 

0 

0 

C4004 

C4004 

D509 

SNVN 

TCON 

T150 

C160 

FNNVSE 

0 

0 

T150 

Cl  60 

VSNVSE 

0 

0 

T2000 

C4003 

FNNVSE 

0 

0 

T2201 

C3060 

FNNVSE 

0 

0 

C4010 

C4004 

040 

UNFN 

TCON 

T2030 

C2800 

FNNVUE 

0 

0 

T2040 

C4800 

FNNVUE 

0 

0 

T2100 

C150 

FNNVUE 

0 

0 

C4015 

C4015 

0509 

SNVN 

TCON 

T150 

C160 

FNNVSE 

0 

0 

T1 50 

C160 

VSNVSE 

0 

0 

T2000 

C4016 

FNNVSE 

0 

0 

T2201 

C4070 

FNNVSE 

0 

0 

! <c3060 (t2550t2555t2560t2580>  c3061 c3064 

outnup  !sys  resp  to  resave 
!<aU>FILE  NAME?<SP> 

outnup  '.user  input  filename 
!<all><CR> 

vumcl  !  <al  IXf i  lename> 

outnup  !sys  resp  to  resave 
!<CRXNL>TRANSACTION  TYPE  ?<SPXSP>  pre 
!<CRXNLXNL>ERR-FILE  NAME  >8  CHARACTER 

outnup  !<t2205t2230>  |cr||nircURR  FIL 
!  INVALID  TRANSACTION  TYPE  -RETYPEXSPX 
! INVALID  TRANSACTION  TYPE  ON  RETRIEVED 
! TRANSACTION  xxxxxx  NOT  IN  CURR  FILE<SP 
!  <c3060(t2600)XCRXNL>ILLEGAL  PARAMETE 
!  <  c3060  ( t2300t  23 1 0 )  XCRXNL>spaces<CRX 
! <c2733 <t2290t2300) c3060  Ct2290t2320t234 

outnup  !  |cr||nl|“ 
!<c3070(t2657t2658)>£ND  OF  TRANSACTION 

outnup  !tcon  start3 
!<all>TC0N  VERSION  6.3,  JUNE  1976 
!N0  TEMPORARY  FILE  SPACE  CODE 

outnup  !tcon  first  question 
<<all>FUNCTIONAL  AREA? 

outnup  !user  hits  <nl> 

!<allXCR> 

outnup  !back  to  system,  top  or  type? 
•SYSTEM  ? 

! SYSTEM  ?  preceded  by  message 
! <c2800>TC0N  VERSION  6.3,  JUNE  1976 
! <CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 

outnup  !user  input  functional  area 

!<all>fs 

!<all>dem 

!<allXCR> 

outnup  !back  to  system,  top  or  type? 

! SYSTEM  ? 

! SYSTEM  ?  preceded  by  message 

•TCON  VERSION  6.3,  JUNE  1976 

!<CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 


C4016 

C4015 

D40 

UNFN 

TCON 

T2100 

C4017 

FNNVUE 

0 

0 

C4017 

C4015 

D501 

SNFN 

TCON 

T2001 

C4018 

FNNVSE 

0 

0 

C4018 

C4015 

040 

UNFN 

TCON 

T2030 

C4020 

FNNVUE 

0 

0 

T2040 

C4020 

FNNVUE 

0 

0 

T2100 

Cl  50 

FNNVUE 

0 

0 

C4020 

C4015 

0520 

SNFN 

TCON 

T2110 

C4030 

FNNVSE 

0 

0 

T2110 

C4030 

VSNVSE 

0 

0 

T2190 

C4020 

FNNVSE 

0 

0 

T2200 

C4070 

FNNVSE 

0 

0 

T2201 

C4070 

FNNVSE 

0 

0 

T2120 

C150 

FNNVSE 

0 

0 

C4030 

C4015 

040 

UNVN 

TCON 

T2130 

C4020 

FNNVUE 

0 

0 

T2140 

C4020 

FNNVUE 

0 

0 

T2640 

C5020 

FNNVUE 

0 

0 

T2645 

C5020 

FNNVUE 

0 

0 

T2162 

C4800 

VSFVUE 

0 

0 

T2160 

C4800 

VS  FVUE 

0 

0 

T2180 

C4042 

FNNVUE 

0 

0 

T2181 

C4042 

FNNVUE 

0 

0 

T2100 

Cl  50 

FNNVUE 

0 

0 

C4042 

C4015 

D530 

SNFN 

TCON 

T2210 

C4020 

FNNVSE 

0 

0 

T2190 

C4800 

FNNVSE 

0 

0 

C4Q50 

C4015 

0510 

SNVN 

TCON 

T2002 

C4018 

FNNVSE 

0 

0 

T2020 

Cl  50 

VSNVSE 

0 

0 

C4070 

C4015 

040 

UNVN 

TCON 

T3300 

C4342 

FNNVUE 

0 

0 

T3310 

C4342 

FNNVUE 

0 

0 

T332Q 

C4342 

FNNVUE 

0 

0 

T3330 

C4342 

FNNVUE 

0 

0 

T3340 

C4342 

FNNVUE 

0 

0 

T3350 

C4342 

FNNVUE 

0 

0 

T3380 

C4342 

FNNVUE 

0 

0 

T3390 

C4342 

FNNVUE 

0 

0 

T3400 

C4342 

FNNVUE 

0 

0 

T3410 

C4342 

FNNVUE 

0 

0 

T3420 

C4342 

FNNVUE 

0 

0 

outnup  luser  hits  <nl> 
i  <CR> 

outnup  !tcon  first  question 
! FUNCTIONAL  AREA? 

outnup  !user  input  functional  area 
!  f  s 
Idem 
!  <CR> 

outnup  Isystem  asks  for  old  or  new 
I <c201Q>0LD  OR  NEW- 
!0LD  OR  NEW- 

!<c4030(t2130t2140)>REAOY 
!<c4020(t2190»<CR><NLXNL><CRXNL>TRAN 
!  <CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 
! FUNCTIONAL  AREA  BUSY 

outnup  luser  response  to  old  or  new 
!<all>new<CR> 

!<all>n<CR> 

! <al l>old<CR> 

!<all>o<CR> 

vumc2  Sold  <filename> 
vumc2  !o  <fi lename> 

I same<CR> 

! <al l>s<CR> 

|<CR> 

outnup  Isys.resp  to  same 
! YOU  PRESENTLY  00  NOT  HAVE  A  CURRENT  FI 
I  READY 

outnup  Itcon  start4 

ITCON  VERSION  6.3,  JUNE  1976 

I  NO  TEMPORARY  FILE  SPACE  CODE 

outnup  luser  input  tran  type 

I <c4020 (t220Q) >hd 

I<c4020(t2200)>as 

lam 

lav 

lae 

I  at 

Ima 

Imc 

Ipl 

Ipd 


T343Q 

C4342 

FNNVUE 

0 

0 

T3030 

C990 

FNNVUE 

0 

0 

T2100 

C4050 

FNNVUE 

0 

0 

T2520 

Cl  50 

FNNVUE 

0 

0 

T2540 

C4072 

VSNVUE 

0 

0 

T2610 

C4071 

FNNVUE 

0 

0 

T2612 

C4071 

FNNVUE 

0 

0 

T2611 

C4071 

VSFVUE 

0 

0 

T2613 

C4071 

VSFVUE 

0 

0 

T2640 

C5020 

FNNVUE 

0 

0 

T2162 

C4800 

VSFVUE 

0 

0 

T2550 

C4072 

FNNVUE 

0 

0 

T2555 

C4072 

FNNVUE 

0 

0 

T2560 

C4072 

FNNVUE 

0 

0 

T2630 

C4075 

FNNVUE 

0 

0 

T2631 

C4075 

FNNVUE 

0 

0 

T2632 

C4077 

VSFVUE 

0 

0 

T2633 

C4077 

VSFVUE 

0 

0 

T2580 

C4072 

VSNVUE 

0 

0 

T2600 

C4074 

VSNVUE 

0 

0 

C4071 

C4015 

0506 

SNVN 

TCON 

T2280 

C4072 

FNNVSE 

0 

0 

T2281 

C4072 

VSNVSE 

0 

0 

C4072 

C4072 

01 000 

SNFN 

TCON 

T2201 

C4Q7Q 

FNNVSE 

0 

0 

T2202 

C4070 

FNNVSE 

0 

0 

C4074 

C4072 

0599 

SNVN 

TCON 

T2250 

C4072 

FNNVSE 

0 

0 

T2202 

C4070 

VSNVSE 

0 

0 

C4J75 

C4072 

0581 

SNFN 

TCON 

T2211 

C4076 

FNNVSE 

0 

0 

C4076 

C4072 

040 

UNVN 

TCON 

T2100 

C4072 

FNNVUE 

0 

0 

T2100 

C4077 

VSFVUE 

0 

0 

C4077 

C4072 

0502 

SNVN 

TCON 

T2221 

C4072 

FNNVSE 

0 

0 

T2202 

C407Q 

VSNVSE 

0 

0 

C4080 

C4341 

D560 

SRFN 

TCON 

T344Q 

C4340 

FNNVSE 

0 

0 

C4085 

C4341 

0560 

SRFN 

TCON 

T3450 

C4340 

FNNVSE 

0 

0 

!od 

!bye 

!<CR> 

! <c4020  <t22Q0)>done<CR> 

!dele(te)  <transaction> 

! list<CR> 

! List 1<CR> 

vumcl  Ilist  <f i  lename> 
vumcl  Ilistl  <f i lename> 

!old<CR> 

vumc2  !otd  <f i lename> 

{remove  clearfiles 
! remov  clearfiles 
! remo  clearfiles 
!  resave<CR> 

! resa<CR> 

vumc2  ! resave  <filename> 
vumc2  1 resa  <filename> 

! rese(quence) 

!  retr 

outnup  !sys  resp  to  list 
! ready 

{ready  preceded  by  data/error 

outnup  !sys  resp  after  ready(list),  re 
{ <CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 
!<CRXNL>TRANS ACTION  TYPE  ?<SPXSP> 

outnup  !sys  resp  after  retr 
!  <CRXNL>ILLEGAL  PARAMETER<SPXSPXSP> 
!<CRXNL>TRANSACTION  TYPE  ?<SPXSP>prec 

outnup  {file  name  for  resave 
{ <CRXNL>FILE  NAME?<SP> 

outnup  {user  input  file  name 
!  <CR> 

vumcl  !<filename> 

outnup  !sys  resp  to  file  name 
{<CRXNLXNL>ERR-FILE  NAME  >8  CHARACTER 
{ <CRXNL>TRANS ACTION  TYPE  ?<SPXSP>prec 

outnup  !hd  skeleton 
! skeleton 

outnup  !as  skeleton 
! skeleton 


C4090 

C4341 

0560 

SRFN 

T  CON 

T3460 

C4340 

FNNVSE 

0 

0 

C4110 

C4341 

0560 

SRFN 

TCON 

T3470 

C4340 

FNNVSE 

0 

0 

C4130 

C4341 

0560 

SRFN 

TCON 

T3480 

C4340 

FNNVSE 

0 

0 

C4150 

C4341 

0560 

SRFN 

TCON 

T3490 

C4340 

FNNVSE 

0 

0 

C4210 

C4341 

0560 

SRFN 

TCON 

T3520 

C4340 

FNNVSE 

0 

0 

C4230 

C4341 

0560 

SRFN 

TCON 

T3530 

C4340 

FNNVSE 

0 

0 

C4250 

C4341 

0560 

SRFN 

TCON 

T3540 

C4340 

FNNVSE 

0 

0 

C4270 

C4341 

0560 

SRFN 

TCON 

T3550 

C434Q 

FNNVSE 

0 

0 

C4290 

C4341 

0560 

SRFN 

TCON 

T3560 

C4340 

FNNVSE 

0 

0 

C4310 

C4341 

0560 

SRFN 

TCON 

T3570 

C4340 

FNNVSE 

0 

0 

C4340 

C4341 

D550 

SNFN 

TCON 

T3Q70 

C4700 

FNNVSE 

0 

0 

C4341 

C4710 

0560 

SRVN 

TCON 

T2050 

C4341 

VSNVSE 

0 

0 

C4342 

C4710 

0560 

SRVN 

TCON 

T3070 

C4700 

VSNVSE 

0 

0 

C4700 

C4710 

040 

UNVN 

TCON 

T3030 

C990 

FNNVUE 

0 

0 

T3040 

C4800 

FNNVUE 

0 

0 

T2520 

C150 

FNNVUE 

0 

0 

T2610 

C4380 

FNNVUE 

0 

0 

T2612 

C4380 

FNNVUE 

0 

0 

T2640 

C5020 

FNNVUE 

0 

0 

T2550 

C4710 

FNNVUE 

0 

0 

T2555 

C4710 

FNNVUE 

0 

0 

T2560 

C4710 

FNNVUE 

0 

0 

T2630 

C4711 

FNNVUE 

0 

0 

outnup  lam  skeleton 
1  skeleton 

outnup  lav  skeleton 
1  skeleton 

outnup  lae  skeleton 
1  skeleton 

outnup  lat  skeleton 
1  skeleton 

outnup  !ma  skeleton 
1  skeleton 

outnup  !mc  skeleton 
1  skeleton 

outnup  !pl  skeleton 
1  skeleton 

outnup  !pd  skeleton 
1  skeleton 

outnup  lol  skeleton 
1  skeleton 

outnup  Jod  skeleton 
1  skeleton 

outnup  lend  of  skeletons 
1  END  OF  TRANSACTION 

outnup  1  remnants  of  skeleton  after  <br 
!<CRXNL> 

outnup  {variable  skeleton 
!<c4070(t3300t3310»EN0  OF  TRANSACTION 

outnup  luser  skeleton  data  entry 

!<c471Q(t205Q)>bye 

!<c4342>d  (done  with  this  skeleton) 

1 <c5071 >done<CR> 

!<c5071>list<CR> 

!<c4360(t2050»listl<CR> 

!<c4360(t2050)>old<CR> 

1  remove  clearfiles 
Iremov  clearfiles 
Iremo  clearfiles 
!<c5071>resave<CR> 


i 


T2631 

T3011 

T3012 

T3000 

T3001 

T2890 

T3020 

T3021 

T3010 

T2100 

T2960 

T2940 

T2980 

T2540 

T2541 

T2547 

T2611 

T2613 

T2542 

T2543 

T2162 

T2544 

T2545 

T2546 

T2548 

T2632 

T2633 

T2580 

T2600 

T2161 

T2981 

T2160 

T2891 

T2910 

T2060 

T2061 

T2062 

T2063 

T2064 

T2065 

T2066 

T2067 

T2068 

T2069 

T2961 

T2941 

C4710 

T2050 

T3060 


C4711 

C4700 

C4700 

C4370 

C4370 

C4370 

C4370 

C4370 

C4710 

C4370 

C4370 

C4370 

C4370 

C4800 

C4700 

C4700 

C4380 

C4380 

C4700 

C4700 

C4800 

C4700 

C4700 

C4700 

C4700 

C4713 

C4713 

C4710 

C4731 

C4710 

C4370 

C4710 

C4710 

C4710 

C4710 

C4710 

C4710 

C4710 

C4710 

C4710 

C471Q 

C4710 

C4710 

C4710 

C4370 

C4370 

C4710 

C4700 

C4710 


FNNVUE  0 
FNNIUE  0 
FNNIUE  0 
FNNVUE  0 
FNNVUE  0 
FNNVUE  0 
FNNVUE  0 
FNNVUE  0 
FNNVUE  0 
FNNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNIUE  0 
VSNIUE  0 
VSFVUE  0 
VSFVUE  Q 
VSNIUE  0 
VSNIUE  0 
VSFVUE  0 
VSNIUE  0 
VSNIUE  0 
VSNIUE  0 
VSNIUE  0 
VSFVUE  0 
VS  FVUE  0 
VSNVUE  0 
VSNVUE  Q 
VSNVUE  0 
VSNVUE  Q 
VSNVUE  Q 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  0 
VSNVUE  U 
VSNVUE  0 
VSNVUE  0 

0570  SNVN 
FNNVSE  0 
FNNVSE  0 


!<c4360(t2050)>resa<CR> 

! system<CR> 

! syst<CR> 

* test<CR> 

!t<CR> 

{ tn<CR> 

! xmit<CR> 

!x<CR> 

! *<CR> 

!<CR> 

{backward 
! forward 
{get <SP> 

! dele(te) 

! feed(back) 

!  help 

vumcl  {List  <filename> 
vumcl  Jlistl  <filename> 

{next 

!nofe(ed> 

vumc2  {old  <filename> 

{pass 
! rewi Cnd) 

{skip 

! voca(bulary) 

vumc2  ! resave  <f i lename> 
vumc2  ! resa  <filename> 

! rese(quence) 

!  retr 

!ol  <f i lename> 

!g<SP> 

!o  <fi Lename> 

!  tn 
!  C 

!0<SP> 

! 1 <SP> 

! 2<SP> 

! 3<SP> 

! 4<SP> 

! 5<SP> 

{ 6<SP> 

!7<SP> 

!  8<SP> 

{ 9<SP> 

!  b 
!  f 

outnup  !sys  resp  to  skel  data  entry 
!  <c4380 Ct2281 )  c471 2c5050XCRXNL> 
{INVALID  COMMAND  AT  THIS  LEVEL 


| 

* 

& 


if 


I 


A  -  31 


|V 


T3050  C4715  VSNVSE  0 


0 


!  DATA  TRUNCATED<SP> 


T3050 

C4711 

C4715 

C4710 

VSNVSE 

0581 

0 

SNFN 

0 

TCON 

$ 

. r . 

!  DATA  TRUNCATEO<SP> 

outnup  !sys  resp  to  resa  cmd 

T2211 

C4712 

FNNVSE 

0 

0 

!<all>FILE  NAME?<SP>  Uj 

C4712 

C4370 

040 

UNVN 

TCON 

outnup  luser  input  filename 

T2100 

C4710 

FNNVUE 

0 

0 

!<all><CR>  JS; 

T2100 

C4713 

VNFVUE 

0 

0 

vumcl  !<all><fi  lename>  "'•% 

Sb 

outnup  Isys  resp  to  filename  E 

!  <CRXNL>OATA  SAVED-  $ 

C4713 

C4710 

0539 

SNVN 

TCON 

T2270 

C4714 

FNNVSE 

0 

0 

T2196 

C4710 

VSNVSE 

0 

0 

!  FILE  * < f i  lename>'  DOES  NOT  EXIST— USE  S, 

T2220 

C4710 

VSNVSE 

0 

0 

!<CRXNLX50>FILE  <f i  lename>  —  INCORRE  ft 

T2221 

C4710 

FNNVSE 

0 

0 

!<CRXNLXNL>ERR-FILE  NAME  >8  CHARACTER 

T2224 

C4710 

VSNVSE 

0 

0 

!<CRXNLXNL>ERR-'<character>'  IS  AN  IL  iw 

T2225 

C4710 

VSNVSE 

0 

0 

!<CRXNLXNL>ERR-FIELD  STARTING  WITH  '<  ti 

C4714 

C4710 

0560 

SNVN 

TCON 

5 

outnup  lend  of  data  saved  msg 

T2100 

C4700 

VNNVSE 

0 

0 

!  <f  i  Lename><CRXNL> 

C4715 

C4710 

040 

UNVN 

TCON 

outnup  !  |  cr | “  $ 

T2100 

C4710 

VSNVUE 

0 

0 

1  anything 

C4370 

C4710 

0580 

SNVN 

TCON 

outnup  !  ?  “E | cr 1 1 nl |“R  |cr||nU‘LEVE  ;> 

T2240 

C4710 

VSNVSE 

0 

0 

1  TRANSACTION  xxxxxx  NOT  IN  CURR  FILE<SP 

T26S7 

C4371 

FNNVSE 

0 

0 

!<CRXNL>spaces<CRXNL>TNC000010spacesT  N> 

T2658 

C4371 

VSNVSE 

o  „ 

0 

!  TRANSACTION  SEQUENCE  NUMBER  <CRXNL>  $ 

T2659 

C4371 

VSNVSE 

0 

0 

'.ERROR  MESS AGE<CRXNL>  f 

T3090 

C5060 

FNNVSE 

0 

0 

! TRANSACTION  SENT.  NEXT?<SP>  SJ 

T3090 

C5060 

VSNVSE 

0 

0 

1  TRANSACTION  SENT.  NEXT?<SP>  KV 

T3060 

C4710 

FNNVSE 

0 

0 

1  INVALID  COMMAND  AT  THIS  LEVEL  & 

1  * 

C4371 

C4710 

0560 

SRVN 

TCON 

vj 

outnup  1  |cr||nl|‘  yj 

T3070 

C4700 

VSNVSE 

0 

0 

!  END  OF  TRANSACTION  <CRXNL>  f  i 

T3080 

C4700 

VSNVSE 

0 

0 

!  MORE - <CRXNL>  W 

C4380 

C4800 

D506 

SNVN 

TCON 

ji8 

outnup  !sys  out  of  list  v> 

T2280 

C4710 

FNNVSE 

0 

0 

!  ready 

T2281 

C4710 

VSNVSE 

0 

0 

! <c4700(t2610t2612)>ready  preceded  by  d  ^ 

C4731 

C4800 

0598 

SNVN 

TCON 

i 

outnup  !  |  cr  |  | nL  |  “TYPE 

T2205 

C4733 

FNNVSE 

0 

0 

1  INVALID  TRANSACTION  TYPE  ON  RETRIEVED  V* 

T2240 

C4710 

VSNVSE 

0 

0 

1  TRANSACTION  xxxxxx  NOT  IN  CURR  FILE<SP  •"< 

T2250 

C4710 

FNNVSE 

0 

0 

!  <CRXNL>ILLEGAL  PARAMETER<SPXSPXSP>  ^ 

T2657 

C4732 

FNNVSE 

0 

0 

!<CRXNL>spaces<CRXNL>TNC000010spacesT  »\3 

1  TRANSACTION  SEQUENCE  NUMBER  <CRXNL>  ^ 

T2658 

C4732 

VSNVSE 

0 

0 

C4732 

C4800 

D560 

SRVN 

TCON 

outnup  1  <CRXNL> 

T3070 

C4700 

VSNVSE 

0 

0 

1  END  OF  TRANSACTION  <CRXNL>  ^ 

•is 

& 

ft 

A  -  32  S 

C4733 

C4731 

040 

UNFN 

T  CON 

luser  enters  tran  type 

T3300 

C5070 

FNNVUE 

0 

0 

!  hd 

T3310 

C5070 

FNNVUE 

0 

0 

las 

T3320 

C5070 

FNNVUE 

0 

0 

lam 

T3330 

C5070 

FNNVUE 

0 

0 

lav 

T3340 

C5070 

FNNVUE 

0 

0 

lae 

T3350 

C5070 

FNNVUE 

0 

0 

1  at 

T3380 

C5070 

FNNVUE 

0 

0 

!ma 

T3390 

C5070 

FNNVUE 

0 

0 

!mc 

T3400 

C5070 

FNNVUE 

0 

0 

!pl 

T3410 

C5070 

FNNVUE 

0 

0 

!pd 

T3420 

C5070 

FNNVUE 

0 

0 

lot 

T3430 

C5070 

FNNVUE 

0 

0 

lod 

C4800 

CS084 

0540 

SNVN 

T  CON 

outnup  IvariabLe  tran  type 

T2110 

C4990 

FNNVSE 

0 

0 

10LD  OR  NEW- 

T2110 

C4990 

VSNVSE 

0 

0 

1  OLD  OR  NEW- 

T2190 

C4800 

FNNVSE 

0 

0 

1 <c5Q30>READY 

T2200 

C5060 

FNNVSE 

0 

0 

!<c5050(t2190)XCRXNL><NL><CR  ><NL>TRAN 

T2200 

CS060 

VSNVSE 

0 

0 

!<crxnlxnlxcrxnl>transaction  TYPE  ? 

T2201 

C5060 

FNNVSE 

0 

0 

!<c4010c4700(t3040)c505U(t2222)XCRXNL 

T2201 

C5060 

VSNVSE 

U 

0 

!<CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 

12222 

C4800 

FNNVSE 

0 

0 

!<c5030XCRXNL>£RR-FILE  NAME  >8  CHARAC 

C4990 

C5084 

D40 

UNVN 

TCON 

outnup  luser  response  to  old  or  new 

T2130 

C4020 

FNNVUE 

0 

0 

!new<CR> 

T2140 

C4020 

FNNVUE 

0 

0 

!n<CR> 

T2640 

C5020 

FNNVUE 

0 

0 

!old<CR> 

T2645 

C5020 

FNNVUE 

0 

0 

!o<CR> 

T2162 

C4800 

VSFVUE 

0 

0 

vumc2  lold  <filename> 

T2160 

C4800 

VSFVUE 

0 

0 

vumc2  !o  <filename> 

T2180 

C5012 

FNNVUE 

0 

0 

!same<CR> 

T2181 

C5012 

FNNVUE 

0 

0 

1 s<CR> 

T2100 

Cl  50 

FNNVUE 

0 

0 

1  <CR> 

C5012 

C5084 

0530 

SNFN 

TCON 

outnup  Isys  resp  to  same 

T2210 

C4800 

FNNVSE 

0 

0 

'.YOU  PRESENTLY  00  NOT  HAVE  A  CURRENT  FI 

T2190 

C4800 

FNNVSE 

0 

0 

1  READY 

C5020 

C4800 

0581 

SNFN 

TCON 

outnup  Isys  resp  to  old<CR> 

T3110 

C5030 

FNNVSE 

0 

0 

1 <c4030 (t2640t2645) C4700 (t2640) c4990 (t2 

C5030 

C4800 

040 

UNVN 

TCON 

outnup  luser  input  old  filename 

T2100 

C4800 

FNNVUE 

0 

0 

!<CR> 

T2100 

C4800 

VNFVUE 

0 

0 

vumcl  !<c5020><f i lename> 

C5Q51 

C4710 

0560 

SNVN 

TCON 

outnup  lend  of  data  saved  msg 

T2100 

C4700 

VNNVSE 

0 

0 

1  <f  i  lenameXCRXNL> 

C5060 

C4710 

040 

UNVN 

TCON 

outnup  luser  input  tran  type 

A  -  33 


r 


a 


s 


I 


T33U0 

C5070 

FNNVUE 

0 

0 

!<c505Q(t22Q1 )>hd 

T3310 

C5070 

FNNVUE 

0 

0 

!<c5050(t2201»as 

T3320 

C5070 

FNNVUE 

0 

0 

!  am 

T3330 

C5070 

FNNVUE 

0 

0 

!av 

T3340 

C5070 

FNNVUE 

0 

0 

!ae 

T3350 

C507Q 

FNNVUE 

0 

0 

•at 

T3380 

C5070 

FNNVUE 

U 

0 

!ma 

T3390 

C5070 

FNNVUE 

0 

0 

!mc 

T3400 

C5070 

FNNVUE 

0 

0 

!pl 

T3410 

C5070 

FNNVUE 

0 

0 

!pd 

T3420 

C5070 

FNNVUE 

0 

0 

lot 

T3430 

C5070 

FNNVUE 

0 

0 

!od 

T3010 

C5070 

FNNVUE 

0 

0 

!<c5Q5Q(t22Q1)>* 

T3030 

C990 

FNNVUE 

0 

0 

!bye 

T2100 

CS080 

FNNVUE 

0 

0 

!  <CR> 

T2540 

C5062 

VSNVUE 

0 

0 

!dele(te)  <transaction> 

T2520 

C150 

FNNVUE 

0 

0 

!done<CR> 

T2610 

C5061 

FNNVUE 

0 

0 

! list<CR> 

T2612 

C5061 

FNNVUE 

0 

0 

! listl<CR> 

T2611 

C5061 

VSFVUE 

0 

0 

vumcl  ! L i st  <filename> 

T2613 

C5061 

VSFVUE 

0 

0 

vumcl  llistl  <f i Lename> 

T2640 

C5020 

FNNVUE 

0 

0 

!old<CR> 

T2162 

C4800 

VSFVUE 

0 

0 

vumc2  !old  <f i lename> 

T2550 

CS062 

FNNVUE 

0 

0 

! remove  clearfiles 

T2555 

C5062 

FNNVUE 

0 

0 

!remov  clearfiles 

T2560 

C5062 

FNNVUE 

0 

0 

!remo  clearfiles 

T2630 

C5063 

FNNVUE 

0 

0 

! resave<CR> 

T2631 

C5063 

FNNVUE 

0 

0 

! resa<CR> 

T2632 

C5065 

VS  FVUE 

0 

0 

vumc2  ! resave  <f i lename> 

T2633 

C5065 

VSFVUE 

0 

0 

vumc2  !resa  <filename> 

T2580 

C5062 

VSNVUE 

0 

0 

! rese(quence) 

T2600 

C5070 

VSNVUE 

0 

0 

!  retr 

C5061 

C5084 

0506 

SNVN 

T  CON 

outnup  !sys  resp  to  list 

T2280 

C5062 

FNNVSE 

0 

0 

! ready 

T2281 

C5062 

VSNVSE 

0 

0 

! ready  preceded  by  data/error 

C5062 

C5062 

D1000 

SNFN 

TCON 

outnup  !sys  resp  after  ready(list),  re 

T2201 

C5060 

FNNVSE 

0 

0 

!<CRXNL>  TRANSACTION  TYPE  ?<SP><SP> 

T2202 

C5060 

FNNVSE 

0 

0 

!<crxnl>transaction  TYPE  ?<spxsp> 

C5063 

C5062 

0581 

SNFN 

TCON 

outnup  !sys  resp  to  resave 

T2211 

C5064 

FNNVSE 

0 

0 

! FILE  NAME?<SP> 

C5064 

C5062 

040 

UNVN 

TCON 

outnup  iuser  input  filename 

T2100 

C5062 

FNNVUE 

0 

0 

!<CR> 

T2100 

C5065 

VNFVUE 

0 

0 

vumcl  !  <al  ixf  i  lename> 

C5065 

C5062 

0502 

SNVN 

TCON 

outnup  !sys  resp  to  resave 

T2202 

C5060 

VSNVSE 

0 

0 

!  <CRXNL>TR ANSACTION  TYPE  ?<SPXSP>  pre 

A  -  34 


T2221 

C5062 

FNNVSE 

0 

0 

C5070 

C4800 

D598 

SNVN 

TCON 

T2230 

C5060 

FNNVSE 

0 

0 

T2205 

C4733 

FNNVSE 

0 

0 

T2240 

C5062 

VSNVSE 

0 

0 

T2250 

C5062 

FNNVSE 

0 

0 

T2657 

C5071 

FNNVSE 

0 

0 

T2658 

C5071 

VSNVSE 

0 

0 

C5071 

C4341 

0560 

SRVN 

TCON 

T3U70 

C4700 

VSNVSE 

0 

0 

C5080 

C5084 

D510 

SNVN 

TCON 

T2002 

C5090 

FNNVSE 

0 

0 

T2020 

C150 

VSNVSE 

0 

0 

C5081 

C5084 

D501 

SNFN 

TCON 

T2001 

C5090 

FNNVSE 

0 

0 

C5384 

C5084 

D509 

SNVN 

TCON 

T150 

C160 

FNNVSE 

0 

0 

T150 

C160 

VSNVSE 

0 

0 

T2000 

C5083 

FNNVSE 

0 

0 

T2201 

C5060 

FNNVSE 

0 

0 

C5083 

C5084 

D40 

UNFN 

TCON 

T2100 

C5081 

FNNVUE 

0 

0 

C5090 

C5084 

D40 

UNFN 

TCON 

T2030 

C2800 

FNNVUE 

0 

0 

T2040 

C4800 

FNNVUE 

0 

0 

T2100 

C150 

FNNVUE 

0 

0 

C6000 

C150 

D6000 

SNFA 

SIOS 

T6000 

C6010 

FNNVSE 

0 

0 

C6010 

C150 

D40 

SNVN 

SIOS 

T6010 

C6020 

VSNVSE 

0 

0 

C6020 

Cl  50 

D40 

SRFN 

SIOS 

T6020 

C6030 

FNNVSE 

0 

0 

C6030 

C150 

D40 

UNVN 

SIOS 

T603U 

C6100 

VSNVUE 

0 

0 

T6031 

C6300 

FNNVUE 

0 

0 

T6032 

C6300 

VSNVUE 

0 

0 

T6033 

C6400 

VSNVUE 

0 

0 

T6034 

C6200 

VSNVUE 

0 

0 

T6035 

Cl  50 

FNNVUE 

0 

0 

!<CRXNLXNL>ERR-FILE  NAME  >8  CHARACTER 

outnup  !  | cr | |nl | “CURR  FILE  *|  ||  ||  | 
!  INVALID  TRANSACTION  TYPE  -RETYPE-<SPX 
! INVALID  TRANSACTION  TYPE  ON  RETRIEVED 
! TRANSACTION  xxxxxx  NOT  IN  CURR  FILE<SP 
!  <CRXNL>ILLESAL  PARAMETER<SPXSPXSP> 
!<c5060(t3010)xCRXNL>spaces<CRXNL>TN 
i <c5060(t3300t3310)>TRANSACTI0N  SEUUENC 

outnup  !  |cr||nl|“ 

!<all>END  OF  TRANSACTION  <CRXNL> 

outnup  Itcon  starts 
! TCON  VERSION  6.3,  JUNE  1976 
! NO  TEMPORARY  FILE  SPACE  CODE 

outnup  !tcon  first  question 
!<all>FUNCTIONAL  AREA? 

outnup  !back  to  system,  top  or  type? 

! SYSTEM  ? 

{SYSTEM  ?  preceded  by  message 

1TC0N  VERSION  6.3,  JUNE  1976 

! <CRXNL>  TRANSACTION  TYPE  ?<SPXSP> 

outnup  luser  hits  <nl>  • 

!<allXCR> 

outnup  {user  input  functional  area 

!<all>fs 

!<all>dem 

!<allXCR> 

outnup  !  begin  sios 
!  "SIOS  ROUTINE  ..." 

outnup  !  WWMCCS  userid  follows 
!  "<userid>" 

outnup  !  prompt  for  function  wanted 
!  "WHAT  FUNCTION  DO  YOU  WANT  ..." 

outnup  !  user  enters  function 
!  m  (move) 

!  c  (clear) 

!  cl  (clear) 

!  s  (search) 

!  r  (return) 

!  <carriage  return> 


C6100 

C150 

D40 

SR  FN 

SIOS 

T6100 

C6110 

FNNVSE 

0 

0 

C611Q 

C150 

D40 

UNVN 

SIOS 

T6110 

C6120 

VNFVUE 

0 

0 

T6035 

C150 

FNNVUE 

0 

0 

C6120 

C150 

D6120 

SNFN 

SIOS 

T6 120 

C6130 

FNNVSE 

0 

0 

T6121 

C6100 

FNNVSE 

0 

0 

T6122 

C6100 

FNNVSE 

0 

0 

C6130 

C150 

D40 

UNVN 

SIOS 

T6110 

C6140 

VNNVUE 

0 

0 

T6035 

C150 

FNNVUE 

0 

0 

C6140 

C150 

D6140 

SNFN 

SIOS 

T6140 

C6150 

FNNVSE 

0 

U 

T6141 

C6120 

FNNVSE 

0 

0 

C6150 

Cl  50 

D40 

UNVN 

SIOS 

T6110 

C6160 

VNNVUE 

0 

0 

T6035 

C150 

FNNVUE 

0 

0 

C6160 

C150 

D6160 

SNFN 

SIOS 

T6160 

C6170 

FNNVSE 

G 

0 

T6161 

C6140 

FNNVSE 

0 

0 

C6170 

C150 

D40 

SNVN 

SIOS 

T6170 

C6020 

VSNVSE 

0 

0 

C6200 

C150 

D40 

SRFN 

SIOS 

T6200 

C6210 

FNNVSE 

0 

0 

C6210 

C150 

040 

UNVN 

SIOS 

T6110 

C6220 

VNFVUE 

0 

0 

T6035 

Cl  50 

FNNVUE 

0 

0 

C6220 

Cl  50 

D6120 

SNFN 

SIOS 

T6120 

C6230 

FNNVSE 

0 

0 

T6121 

C6200 

FNNVSE 

0 

0 

T6122 

C6200 

FNNVSE 

0 

0 

C6230 

C150 

D40 

UNVN 

SIOS 

T6110 

C6240 

VNNVUE 

0 

0 

T6035 

C150 

FNNVUE 

0 

0 

C6240 

C150 

D6140 

SNFN 

SIOS 

T6140 

C6250 

FNNVSE 

0 

0 

outnup  !  prompt  for  file  to  use 
!  "SIOS  MOVE  ROUTINE  ..." 

outnup  !  user  enters  file  to  use 
vumcl  !  <fi Le  name> 

!  <carriage  return> 

outnup  !  sios  response  to  file  name 
!  "SYSTEM  ID  YOU  WANT  TO  USE" 

!  "YOUR  FILE  IS  BUSY" 

!  "UNABLE  TO  ACCESS  YOUR  FILE" 

outnup  !  user  enters  system  id 
!  <system  id  to  use> 

!  <carriage  return> 

outnup  !  sios  response  to  system  id 
!  "WUFI  FILE  YOU  WANT  TO  USE" 

!  "SYSTEM  ID  IS  NOT  AUTHORIZED" 

outnup  !  user  enters  wufi  file 
!  <wufi  file  name> 

!  <carriage  return> 

outnup  !  sios  response  to  wufi  file 
!  "DATA  WAS  MOVED" 

!  "SYSTEM  ID  IS  INVALID  ON  WUFI" 

outnup  !  number  of  records  moved 
!  "nnnnnn  RECORDS" 

outnup  !  prompt  for  file  to  use 
!  "SIOS  RETURN  ROUTINE  ..." 

outnup  !  user  enters  fi le  to  use 
vumcl  !  <f i le  name> 

!  <carriage  return> 

outnup  !  sios  response  to  file  name 
!  "SYSTEM  ID  YOU  WANT  TO  USE" 

!  "YOUR  FILE  IS  BUSY" 

!  "UNABLE  TO  ACCESS  YOUK  FILE" 

outnup  !  user  enters  s./stem  id 
!  <system  id  to  use> 

!  <carriage  return> 

outnup  !  sios  response  to  system  id 
!  "WUFI  FILE  YOU  WANT  TO  USE" 


AD-A171  312  FORSCON  SECURITV  MONITOR  (FSM)  COMPUTER  PROGRAM 

DEVELOPMENT  SPECIFICATION  (TVPE  65 > C U )  LOGICON  INC  SAN 
DIEGO  CA  FEB  SI  N60a39-78-C-6323 


1/4 


UNCLASSIFIED 


F/G  9/2 


NL 


C6250 

Cl  50 

040 

UNVN 

SIOS 

T6110 

C6260 

VNNVUE 

U 

0 

T6035 

C150 

FNNVUE 

0 

0 

C6260 

Cl  50 

D6260 

SNFN 

SIOS 

T6260 

C6270 

FNNVSE 

0 

0 

T6261 

C6020 

FNNVSE 

0 

0 

T2100 

C6020 

VSNVSE 

0 

0 

C6270 

C150 

040 

SNVN 

SIOS 

T6170 

C6280 

VSNVSE 

0 

0 

C6280 

C150 

06140 

SNFN 

SIOS 

T6280 

C6020 

FNNVSE 

0 

0 

C6300 

C150 

040 

SRFN 

SIOS 

T6300 

C6310 

FNNVSE 

0 

0 

C6310 

Cl  50 

D40 

UNVN 

SIOS 

T6110 

C6320 

VNNVUE 

0 

0 

T6035 

C150 

FNNVUE 

0 

0 

C6320 

C150 

D6140 

SNFN 

SIOS 

T6140 

C6330 

FNNVSE 

0 

0 

C6330 

C150 

D40 

UNVN 

SIOS 

T6110 

C6340 

VNNVUE 

0 

0 

T6035 

Cl  50 

FNNVUE 

0 

0 

C6340 

Cl  50 

D6340 

SNFN 

SIOS 

T6280 

C6020 

FNNVSE 

0 

0 

T634Q 

C6020 

FNNVSE 

0 

0 

C6400 

C150 

D40 

SRFN 

SIOS 

T6400 

C6410 

FNNVSE 

0 

0 

C6410 

C150 

D40 

UNVN 

SIOS 

T6110 

C6420 

VNNVUE 

0 

0 

T6035 

Cl  50 

FNNVUE 

0 

0 

C6420 

C150 

D6140 

SNFN 

SIOS 

T6140 

C6430 

FNNVSE 

0 

0 

C6430 

C150 

D4Q 

UNVN 

SIOS 

T6110 

C6440 

VNNVUE 

0 

0 

T6035 

Cl  50 

FNNVUE 

0 

0 

C6440 

Cl  50 

D6140 

SNVN 

SIOS 

T6440 

C6450 

VSNVSE 

0 

0 

T6441 

C6020 

FNNVSE 

0 

0 

outnup  !  user  enters  wufi  file 
!  <wufi  file  name> 

1  <carriage  return> 

outnup  !  sios  response  to  wufi  file 
!  “RECORDS  WERE  RETURNED" 

!  "NO  DATA  FOR  THIS  SYSTEM  ID  ...  " 

! error  message 

outnup  !  number  of  records  returned 
!  "nnnnnn  RECORDS" 

outnup  !  finish  up  normal  return 
!  "WUFI  RECORDS  WERE  CLEARED" 

outnup  !  prompt  for  system  id  to  use 
!  "SIOS  CLEAR  ROUTINE  ..." 

outnup  !  users  enters  system  id 
!  <system  id> 

!  <carriage  return> 

outnup  !  sios  response  to  system  id 
!  "WUFI  FILE  YOU  WANT  TO  USE" 

outnup  !  user  enters  wufi  file 
!  <wufi  file  name> 

!  <carriage  return> 

outnup  !  sios  response  to  wufi  file 
!  "WUFI  RECORDS  WERE  CLEARED" 

!  "NO  DATA  TO  CLEAR" 

outnup  !  prompt  for  system  id 
!  "SIOS  SEARCH  ROUTINE  ...” 

outnup  !  user  enters  system  id 
!  <system  id> 

!  <carriage  return> 

outnup  !  sios  response  to  system  id 
!  "WUFI  FILE  YOU  WANT  TO  USE" 

outnup  !  user  enters  wufi  file 
!  <wufi  file  name> 

!  <carriage  return> 

outnup  !  sios  response  to  wufi  file 
!  "nnnnnn  BLOCKS  OF  DATA" 

!  "NO  RECORDS  FOUND" 


C6450 

Cl  50 

D40 

SNVN 

SIOS 

outnup  !  number  of  records  involved 

T6170 

C6020 

VSNVSE 

0 

0 

!  "nnnnnn  RECORDS" 

C7000 

Cl  50 

07000 

SRVA 

LIST 

outnup  !  list  output 

T7000 

C150 

VSNVSE 

0 

0 

!  "ready" 

T7001 

C150 

FNNVSE 

0 

0 

•  <CRXNL>i l legal  character 

T7002 

Cl  50 

FNNVSE 

0 

0 

!<CRXNLX52> CURRENT  FILE  NOT  DEFINED  < 

T150 

C160 

VSNVSE 

0 

0 

! <CRXNL>SYSTEM  ?  (preceded  by  anything 

C9000 

C150 

020 

SNFA 

WWDMS 

outnup  !<pop>WWDMS  entry  point 

T2110 

C9010 

FNNVSE 

0 

0 

!<all>OLD  OR  NEW- 

C9010 

Cl  50 

040 

UNFN 

WWDMS 

outnup  luser  resp  to  old/new 

T2100 

C150 

FNNVUE 

0 

0 

!<c9000xCR> 

T2130 

C9020 

FNNVUE 

0 

0 

!<all>new<CR> 

T2140 

C9020 

FNNVUE 

0 

0 

!<all>n<CR> 

C9020 

Cl  50 

09020 

SNFN 

WWDMS 

outnup  !<all>system  is  ready 

T2190 

C9030 

FNNVSE 

0 

0 

!<all>READY 

C9030 

C150 

D9030 

SNVN 

WWDMS 

outnup  I WWDMS  prompt 

T9030 

C9040 

FNNVSE 

0 

0 

!<c9020  c9210XCRXNL>* 

T9030 

C9040 

VSNVSE 

0 

0 

!<c9160(pop)>prompt  preceded  by  error 

C9040 

C150 

040 

UNFN 

WWDMS 

outnup  ! run  commands 

T904Q 

C9050 

FNNVUE 

0 

0 

! <c9030 (t9030F»run  mc76 /exer ci  se/equip 

T9050 

C9050 

FNNVUE 

0 

0 

!<c9030(t9U30F)>runs  mc76/exercise/equi 

T9060 

C9050 

FNNVUE 

0 

0 

! <c9030 (t9030  F) >run j  mc76/exerc i se/equi 

T9070 

C9550 

FNNVUE 

0 

0 

!<c9030(t9030F)>run  mc76/exercise/rptmo 

T9075 

C9550 

FNNVUE 

0 

0 

! <c9030 (t9030  F) >runs  mc76/exer c i se/ rptm 

T9080 

C9550 

FNNVUE 

0 

0 

! <c9030 (t9030F) >run j  mc76/exerci se/rptm 

T9090 

C9300 

FNNVUE 

0 

0 

!<c9030(t9030F)>run  mc76/exerci se/accim 

T9100 

C9300 

FNNVUE 

0 

0 

!<c9210(t9030V)>runs  mc76/exercise/acci 

T9110 

C9300 

FNNVUE 

0 

0 

!<c9210(t9030V)>runj  mc76/exercise/acci 

T9120 

C9300 

FNNVUE 

0 

0 

!<c9170(t9030V)>run  mc76/exercise/info 

T9130 

C9300 

FNNVUE 

0 

0 

!<c9210(t9030V)>runs  mc76/exercise/info 

T9140 

C9300 

FNNVUE 

0 

0 

1 < c91 60 ( t9030 F) > run j  mc76 /exercise/info 

T9150 

C9300 

FNNVUE 

0 

0 

!<c9160(t9030F)>run  mc76/exercise/stren 

T9160 

C9300 

FNNVUE 

0 

0 

!runs  mc76/exercise/strength 

T9170 

C9300 

FNNVUE 

0 

0 

!<c9030(t9030F)>runj  mc76/exercise/stre 

T9180 

C9300 

FNNVUE 

0 

0 

!run  mc76/exercise/ready 

T9190 

C9300 

FNNVUE 

0 

0 

!runs  mc76/exercise/ready 

T9200 

C9300 

FNNVUE 

0 

0 

! < c9030 ( t9030 F) >run j  mc76 /exe  r c i se/ read 

T9210 

C9300 

FNNVUE 

0 

0 

! run  mc76/exercise/pomcus 

T9220 

C9300 

FNNVUE 

0 

0 

!runs  mc76/exercise/pomcus 

T9230 

C9300 

FNNVUE 

0 

0 

! <c9030 (t9030 F) >run j  mc76/exer ci se/pomc 

T9240 

C9550 

FNNVUE 

0 

0 

!run  mc76/exercise/deployrp 

T9250 

C9550 

FNNVUE 

0 

0 

! runs  mc76/exercise/deployrp 

T9260 

C9550 

FNNVUE 

0 

0 

! run j  mc76/exercise/deployrp 

T9270 

C9300 

FNNVUE 

0 

0 

!run  mc76/exercise/dployhpa 

A  -  38 


V 


w»y 


T9280 

C9300 

FNNVUE 

0 

0 

T9290 

C9300 

FNNVUE 

0 

0 

T9300 

C9300 

FNNVUE 

0 

0 

T9310 

C9300 

FNNVUE 

0 

0 

T9320 

C9300 

FNNVUE 

0 

0 

T9330 

C9550 

FNNVUE 

U 

0 

T9340 

C9550 

FNNVUE 

0 

0 

T9350 

C955U 

FNNVUE 

0 

0 

T9360 

C9300 

FNNVUE 

0 

0 

T9370 

C9300 

FNNVUE 

0 

0 

T9380 

C9300 

FNNVUE 

0 

0 

T9390 

C9550 

FNNVUE 

0 

0 

T9400 

C9550 

FNNVUE 

0 

0 

T9410 

C9550 

FNNVUE 

0 

0 

T9420 

C9300 

FNNVUE 

0 

0 

T9430 

C9300 

FNNVUE 

0 

0 

T9440 

C9300 

FNNVUE 

0 

0 

T3030 

C990 

FNNVUE 

0 

0 

T2520 

C150 

FNNVUE 

0 

0 

T2100 

C9030 

FNNVUE 

Q 

0 

C9050 

C9030 

D9040 

SNFN 

WWDMS 

T9500 

C9051 

FNNVSE 

0 

0 

C9051 

C9030 

D560 

SNFN 

WWDMS 

T9501 

C9052 

FSNVSE 

0 

1 

C9052 

C9030 

D9045 

SNFN 

WWDMS 

T9520 

C9070 

FNNVSE 

0 

0 

C9Q7Q 

C9030 

040 

UNVN 

WWDMS 

T2100 

C9080 

VSNVUE 

0 

0 

C9080 

C9030 

D9060 

SNVN 

WWDMS 

T9530 

C9090 

FNNVSE 

0 

0 

T9530 

C9090 

VSNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9U30 

C9040 

VSNVSE 

0 

0 

C9090 

C9030 

D40 

UNVN 

WWDMS 

T2100 

C9100 

VSNVUE 

0 

0 

C9100 

C9030 

D9060 

SNVN 

WWDMS 

T9540 

C9110 

FNNVSE 

0 

0 

T9540 

C9110 

VSNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9Q40 

VSNVSE 

0 

0 

C9110 

C9030 

D40 

UNVN 

WWDMS 

T21QQ 

C9120 

VSNVUE 

0 

U 

Iruns  mc76/exercise/dployhpa 

!runj  mc76/exercise/dployhpa 

'.run  mc76/exercise/cinc 

iruns  mc76/exercise/cinc 

!<c9030(t9Q3QF)>runj  mc76/exercise/cinc 

!run  mc76/exercise/exdeploy 

iruns  mc76/exercise/exdeploy 

irunj  mc76 /exercise/exdeploy 

irun  mc76/exercise/trans 

iruns  mc76/exercise/trans 

!<c9030(t9Q3QF)>runj  mc76/exercise/tran 

i < c9030 < t9Q30 F) > run  mc76 /exercise/ rpt or 

iruns  mc76/exercise/rptor 

irunj  mc76/exercise/rptor 

irun  mc76/exercise/mbcoistl 

iruns  mc76/exercise/mbcoistl 

i<c9030(t9030F)>runj  mc76/exercise/mbco 

i <c9030>bye 

! <c9030 (t9030F)>done<CR> 

!<CR> 

outnup  ! compiler  pass  1 
!<c9040(t9040  t9060)XCRXNL>  . 

outnup  icompiler  pass  2 
i<all>.<CRXNL> 

outnup  ! 1 st  question  for  EQUIP 
•<all>ENTER  REQUIRED  PARAMETER  FOR  'OMN 

outnup  iuser  enters  cat  file 
i<all>omni/<userid-pref ix>/<fi lename> 

outnup  iquery  for  fldname 
i<all>ENTER  FLDNAME  =  LITERAL 
! ENTER  FLDNAME  *  LITERAL 
!<CRXNL>* 

! prompt  preceded  by  error 

outnup  iuser  enters  fieldname 
5<all>fieldname  s  "literal" 

outnup  iquery  for  sort-keyl 
i<c9090>ENTER  S0RT-KEY1 
!  ENTER  S0RT-KEY1 
!<CRXNL>* 

i prompt  preceded  by  error 

outnup  iuser  enters  sort-keyl 
!<all>sort-key1 


C9120 

C9030 

09060 

SNVN 

WWDMS 

T9550 

C9130 

FNNVSE 

0 

0 

T9550 

C9130 

VSNVSE 

0 

0 

T9Q30 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9130 

C9030 

040 

UNVN 

WWDMS 

T9325 

C9140 

VNNVUE 

0 

0 

C9140 

C9030 

09060 

SNVN 

WWDMS 

T9560 

C9150 

FNNVSE 

0 

0 

T9560 

C9150 

VSNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9150 

C9030 

040 

UNVN 

WWDMS 

T9325 

C9160 

VNFVUE 

0 

0 

C9160 

C9160 

D9050 

SNVN 

WWDMS 

T9500 

C9170 

FNNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9170 

C9170 

09070 

SNVN 

WWDMS 

T9501 

C9170 

FSNVSE 

0 

1 

T9700 

C9180 

FNNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

T2050 

C9170 

FNNVSE 

0 

0 

T9325 

C9170 

VNNVSE 

0 

0 

C9180 

C9030 

040 

UNVN 

WWDMS 

T9325 

C919Q 

VNNVUE 

0 

0 

C9190 

C9030 

D9Q80 

SNVN 

WWDMS 

T9710 

C9200 

FNNVSE 

0 

0 

T9750 

C9170 

FNNVSE 

0 

0 

T2100 

C9030 

VNNVSE 

0 

0 

C9200 

C9030 

040 

UNVN 

WWDMS 

T100 

C9210 

VSNVUE 

0 

0 

C9210 

C9211 

09120 

SNVN 

WWDMS 

T9030 

C9040 

FNNVSE 

0 

0 

T9Q30 

C9040 

VSNVSE 

0 

0 

T10210 

C9210 

VSNVSE 

0 

0 

T10290 

C9210 

VSNVSE 

0 

0 

T10300 

C9030 

VSNVSE 

0 

0 

T9800 

C9230 

VSNVSE 

0 

0 

T2100 

C9210 

FNNVSE 

0 

0 

outnup  ! query  for  sort-key2 
! <c911Q>ENTER  S0RT-KEY2 
! ENTER  S0RT-KEY2 
!<CRXNL>* 

! prompt  preceded  by  error 

outnup  !user  enters  last  arg 
!<c9120(t9550F)  c9390Ct9600F  t9600V)>la 

outnup  {query  for  output  file 
!<all>ENTER  OUTPUT  FILENAME 
!<al 1>ENTER  OUTPUT  FILENAME 
!<CRXNL>* 

1  prompt  preceded  by  error 

outnup  !user  enters  filename 
vumcl  !<c9140Xfi  lename> 

Icompi ler  pass  3 
!<allXCRXNL>  . 

!<allXCRXNLX 

{prompt  preceded  by  error 
! run-id 

!  <c91 60  Ct9500  F)  >  .<CRXNL> 

!<c9170(t9501 )>RUN-ID? 

!<CRXNL>* 

!<c9170(t2100»prompt  preceded  by  error 
!  <c916Q  (t9500F)  XCRXNL> 
!<c9170(t2050)>errors 

outnup  {user  enters  run-id 
!<allXrun-id> 

outnup  Jident? 

!<all>$  IOENT? 

!<CRXNL>MUST  BE  12  CHARACTERS  OR  LESS 
{(anything  else) 

outnup  {user  enters  ident 
!<alixident> 

{end  of  status 
!<CRXNLX 

{<c9200  c9210(t10290)xCRXNL>*  precede 
!<c9200>(ab)normal  termination 
!<c9200>N0T  IN  SYSTEM 
! <c9200>INV0KE  JOUT  MANUALLY 
!<c9210 (t10210)>J0UT  INVOKED  FOR  SNUM8. 
!  <carriage  return>  (only) 


T9325  C9210  VNNVSE  0  0  !  anything  else 


C9211 

C9211 

09061 

SNVN 

WWDMS 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

T975S 

C9212 

FNNVSE 

0 

0 

C9212 

C9211 

040 

UNVN 

WWDMS 

T9760 

C9210 

FNNVUE 

0 

0 

T9761 

C9213 

FNNVUE 

0 

0 

T9762 

C9215 

VSNVUE 

0 

0 

T9763 

C9218 

FNNVUE 

0 

0 

T9764 

C9210 

FNNVUE 

0 

0 

T2100 

C9210 

FNNVUE 

0 

0 

C9213 

C9211 

09097 

SNFN 

WWDMS 

T9756 

C9214 

FNNVSE 

0 

0 

C9214 

C9211 

040 

UNVN 

WWDMS 

T2100 

C9210 

VSNVUE 

0 

0 

C9215 

C9211 

0581 

SNFN 

WWDMS 

T9757 

C9216 

FNNVSE 

0 

0 

C9216 

C9211 

040 

UNVN 

WWDMS 

T2100 

C9211 

FNNVUE 

0 

0 

T2100 

C9217 

VSNVUE 

0 

0 

C9217 

C9211 

09063 

SNFN 

WWDMS 

T9758 

C9215 

FNNVSE 

0 

0 

T2100 

C9211 

VNNVSE 

0 

0 

C9218 

C9211 

09064 

SNFN 

WWOMS 

T9759 

C9219 

FNNVSE 

0 

0 

C9219 

C9211 

040 

UNVN 

WWDMS 

T2100 

C9220 

VSNVUE 

0 

0 

C9220 

C9211 

09065 

SNFN 

WWDMS 

T9754 

C9211 

FNNVSE 

0 

0 

T2100 

C9211 

VNNVSE 

0 

0 

C9230 

C9231 

09100 

SNVN 

WWOMS 

T10270 

C9Q30 

VSNVSE 

0 

0 

T10280 

C9Q3Q 

VSNVSE 

0 

0 

T9 801 

C9240 

FNNVSE 

0 

0 

T9030 

C904Q 

FNNVSE 

U 

0 

C9231 

C9231 

09096 

SNVN 

WWDMS 

T9030 

C9040 

FNNVSE 

0 

0 

outnup  !<break>  during  output 
1<CRXNL>* 

!  <CRXNL>*  preceded  by  error 
•LOOK,  MORE,  DELE,  ABRT,  OR  UUIT? 

outnup  iuser  response 

!  Look 

imore 

!dele(te) 

!abrt 
iqult 
!  <CR> 

outnup  iasks  for  snumbs 
!  SNUMB(S)- 

outnup  iuser  Inputs  snumbs 
[numbers  or  <CR> 

outnup  'asks  for  snumbs 
! SNUMB? 

outnup  iuser  Inputs  snumb 

!<CR> 

inumber 

outnup  ibad  snumb 
! SNUMB  NOT  IN  TABLE 
! errors? 

outnup  iasks  for  snumb 
! snumb? 

outnup  iuser  Inputs  snumb 
inumber  or  <CR> 

outnup  ibad  snumb 
! SNUMB  NOT  IN  SYSTEM 
ierrors? 

outnup  iasks  for  print  func 
[output  not  found 
! output  busy 

!<c9210(t98Q0)>f unction? 
!<CRXNLX 

outnup  iuser  must  release,  etc. 
!<CRXNL>* 


T9030 

C9040 

VSNVSE 

0 

0 

T978Q 

C9270 

FNNVSE 

0 

0 

C9240 

C9231 

D40 

UNFN 

WWDMS 

T9802 

C9250 

FNNVUE 

0 

0 

T9803 

C9250 

FNNVUE 

0 

0 

T10230 

C9250 

FNNVUE 

0 

0 

T10240 

C9250 

FNNVUE 

0 

0 

C9250 

C9231 

D9095 

SRVN 

WWDMS 

T10170 

C9260 

VSNVSE 

0 

0 

T10250 

C9260 

VSNVSE 

0 

0 

T10260 

C9230 

FSNVSE 

2 

13 

C9260 

C9231 

09064 

SNFN 

WWDMS 

T9801 

C9270 

FNNVSE 

0 

0 

C9270 

C9231 

040 

UNVN 

WWDMS 

T1018Q 

C9030 

FNNVUE 

0 

0 

T10190 

C9030 

VSNVUE 

0 

0 

T10200 

C9030 

FNNVUE 

0 

0 

T10205 

C9030 

FNNVUE 

0 

0 

C9300 

C9030 

D9040 

SNFN 

WWDMS 

T9500 

C9301 

FNNVSE 

0 

0 

C9301 

C9030 

D560 

SNFN 

WWDMS 

T9501 

C9302 

FSNVSE 

0 

1 

C9302 

C9030 

09045 

SNFN 

WWDMS 

T9520 

C9320 

FNNVSE 

0 

0 

C9320 

C9030 

D40 

UNVN 

WWDMS 

T9325 

C9330 

VNNVUE 

0 

0 

C9330 

C9030 

D9060 

SNVN 

WWDMS 

T9530 

C9340 

FNNVSE 

0 

0 

T9530 

C9340 

VSNVSE 

0 

0 

T9531 

C9340 

FNNVSE 

0 

0 

T9531 

C9340 

VSNVSE 

0 

0 

T9Q30 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9340 

C9030 

D40 

UNVN 

WWDMS 

T9325 

C9350 

VNNVUE 

0 

0 

C9350 

C9030 

D9060 

SNVN 

WWDMS 

T9580 

C9360 

FNNVSE 

0 

0 

T9580 

C9360 

VSNVSE 

0 

0 

T9Q30 

C9040 

FNNVSE 

0 

0 

!  <CRXNL>*  preceded  by  data/error 
! please  direct,  release,  or  hold  before 

outnup  !user  inputs  print 
{print  $$ 

Iprin  $$ 

!<all>print  74 
!prin  74 

outnup  lend  of  print 
lend  of  $$ 
lend  of  74 
174  not  found 

outnup  ! second  function 
! function? 

outnup  I  second  func  choices 
•hold 
!  rele 

! direct  ac 
[direct  on l 

outnup  I  compiler  pass  1 
!<c904Q(t9110  t9140  t9440  t9200  t9230  t 

outnup  Icompiler  pass  2 
!<all>.<CR><NL> 

outnup  list  question  for  ACCIHOB,  INFO 
!<all>ENTER  REQUIRED  PARAMETER  FOR  'OMN 

outnup  luser  enters  cat  file 
I <al l>omni /<userid-pref i x>/<f i lename> 

outnup  I  query  for  fldname 
!<all>ENTER  FLDNAME  *  LITERAL 
I  ENTER  FLDNAME  »  LITERAL 
!<all>ENTER  FIELDNAME  *  LITERAL 
!<all>ENTER  FIELDNAME  *  LITERAL 
|<CRXNL>* 

!<CRXNL>*  preceded  by  error 

outnup  luser  enters  fieldname 
!<all>f ieldname  =  "literal" 

outnup  Iquery  for  sort-fieldl 
!<all>ENTER  S0RT-FLD1 
!<c9340>ENTER  S0RT-FLD1 
|<CRXNLX 


T9030 

C9040 

VSNVSE 

0 

0 

C9360 

C9030 

040 

UNVN 

WWDMS 

T9325 

C9370 

VNNVUE 

0 

0 

C9370 

C9030 

09060 

SNVN 

WWDMS 

T9590 

C9380 

FNNVSE 

0 

0 

T9590 

C9380 

VSNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9380 

C9030 

040 

UNVN 

WWDMS 

T9325 

C9390 

VNNVUE 

0 

0 

C9390 

C9030 

D9060 

SNVN 

WWDMS 

T9600 

C9130 

FNNVSE 

0 

0 

T9600 

C9130 

VSNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9550 

C9030 

09040 

SNFN 

WWDMS 

T9500 

C9551 

FNNVSE 

0 

0 

C9551 

C9030 

0560 

SNFN 

WWDMS 

T9501 

C9552 

FSNVSE 

0 

1 

C9552 

C9030 

09045  - 

SNFN 

WWDMS 

T9570 

C9570 

FNNVSE 

0 

0 

C9570 

C9030 

040 

UNVN 

WWDMS 

T2100 

C9580 

VSNVUE 

0 

0 

C9580 

C9030 

09060 

SNVN 

WWDMS 

T9521 

C9590 

FNNVSE 

0 

0 

T9521 

C9590 

VSNVSE 

0 

0 

T9030 

C9040 

FNNVSE 

0 

0 

T9030 

C9040 

VSNVSE 

0 

0 

C9590 

C9030 

040 

UNVN 

WWDMS 

T2100 

C9350 

VSNVUE 

0 

0 

Cl  1000 

C999 

01 1000 

SNVN 

TLCF 

T11000 

C11010 

VSNVSE 

0 

0 

Til  001 

C280 

FNNVSE 

0 

0 

C11010 

C11010 

011010 

SNFN 

TLCF 

T11010 

Cl 1020 

FSNVSE 

122 

31 

Cl 1020 

C11010 

040 

UNFN 

TLCF 

Til  020 

Cl 1030 

FNNVUE 

0 

U 

!<CRXNL>*  preceded  by  error 

outnup  !user  enters  sort-fieldl 
!<all>sort-field1 

outnup  [query  for  sort-field2 
[<all>ENTER  S0RT-FLD2 
!<all>ENTER  S0RT-FL02 
!  <CRXNL>* 

!<CRXNL>*  preceded  by  error 

outnup  !user  enters  sort-f ield2 
!<all>sort-field2 

outnup  ! sort-f ield3  query 
[<al 1>ENTER  S0RT-FLD3 
!<all>ENTER  S0RT-FLD3 
!<CRXNL>* 

!<CRXNL>*  preceded  by  error 

outnup  ! compiler  pass  1 
!  <CRXNL>  . 

outnup  ! compiler  pass  2 
!  .<CRXNL> 

outnup  list  question  for  RPTM08, DEPLOY 
! ENTER  PARAM  FOR  ' SBRPT ' 

outnup  [user  enters  sbrpt 
!<all>"u..." 

outnup  l query  for  cat  file 
!<all>ENTER  PARAM  FOR  OMNI  CAT  FILE 
[ENTER  PARAM  FOR  OMNI  CAT FILE 
!<CRXNLX 

!<CRXNLX  preceded  by  error 

outnup  [user  enters  catfile  name 
!<all>omni/<userid-pref ix>/<fi lename> 

outnup  !  announce  teleconferencing 
!  "TELECONFERENCING  AT  ...  " 

!  "ILLEGAL  CLASSIFICATION  CODE" 

outnup  !  prompt  user  for  conf  action 
!  "USER  ASSISTANCE  IS  AVAILABLE  ..." 

outnup  !  user  enters  conf  action 
!  JCoin) 


Til 021 

C11030 

FNNVUE 

0 

0 

Til  022 

Cl 1030 

FNNVUE 

0 

0 

Til 023 

Cl 1030 

FNNVUE 

0 

0 

Cl  1030 

C11010 

D11030 

SNFN 

TLCF 

Til  030 

Cl 1040 

FNNVSE 

0 

0 

Til  031 

C999 

VSFVSE 

0 

0 

Cl  1040 

C11010 

040 

UNFN 

TLCF 

Til  040 

Cl  1050 

VNNVUE 

0 

0 

Cl  1050 

Cl  1030 

Dll 050 

SNFN 

TLCF 

Til 050 

Cl 1060 

FNNVSE 

0 

0 

T11051 

Cl 1030 

FNNVSE 

0 

0 

Cl  1060 

C11010 

D40 

UNVN 

TLCF 

Til 040 

C1107Q 

VNNVUE 

0 

0 

Cl  1070 

Cl 1050 

Dll 070 

SNFN 

TLCF 

Til 070 

Cl 1080 

FNNVSE 

0 

0 

Til  071 

Cl 1050 

FNNVSE 

0 

0 

T11072 

C999 

FNNVSE 

0 

0 

Cl  1080 

C11010 

D40 

UNVN 

TLCF 

Til 040 

Cl 1090 

VNNVUE 

0 

0 

Cl  1090 

Cl 1070 

Dll 090 

SNFN 

TLCF 

Til 090 

C1110Q 

FNNVSE 

0 

0 

Til  091 

C1114Q 

FNNVSE 

0 

0 

T11072 

C999 

FNNVSE 

0 

0 

Til 070 

Cl 1080 

FNNVSE 

0 

0 

C11100 

C11010 

D40 

UNVN 

TLCF 

Til 040 

C11110 

VNNVUE 

0 

0 

Cl  1 1 1 0 

Cl 1090 

Dll 110 

SNFN 

TLCF 

T11110 

Cl 1120 

FNNVSE 

0 

0 

T11111 

Cl 11 20 

FNNVSE 

0 

0 

T12271 

Cl 1090 

FNNVSE 

0 

0 

C11120 

C11Q10 

040 

UNVN 

TLCF 

T11120 

C11130 

VSNVUE 

0 

0 

Cl  1 1 30 

C11010 

Dll 130 

SNFN 

TLCF 

Til  091 

Cl 11 40 

FNNVSE 

0 

0 

Cl 1 1 40 

C11010 

D11140 

SNVN 

TLCF 

Til  140 

Cl 11 50 

VSNVSE 

0 

0 

!  jo(in) 

!  joi(n) 

!  join 

outnup  !  prompt  user  for  conf  name 
!  "NAME  OF  CONFERENCE  YOU  WISH  TO  JOIN? 
exit  !  "LINE  TERMINATED"  (bad  conf  n 

outnup  !  user  enters  conf  name 
!  < conference  name> 

outnup  !  prompt  user  for  name 
!  "PARTICIPANT’S  NAME?  " 

•  "SORRY,  THAT  CONFERENCE  IS  NOT  IN  SES 

outnup  !  user  enters  name 
!  <name> 

outnup  !  prompt  user  for  password 
!  "PARTICIPANT’S  PASSWORD  ..." 

!  "SORRY,  NAME  6IVEN  NOT  RECOGNIZED" 

!  "ACCESS  DENIED" 

outnup  !  user  enters  password 
!  participant  password> 

outnup  !  prompt  user  for  host  name 
!  "THE  FOLLOWING  QUESTIONS  CONCERN  ... 

!  "ACCESS  GRANTED" 

!  "ACCESS  DENIED" 

!  "PARTICIPANTS  PASSWORD  ..." 

outnup  !  user  enters  host  name 
!  Post  name> 

outnup  !  prompt  user  for  ident 
I  "ENTER  YOUR  ACCOUNT  NUMBER,  ..." 

!  "ENTER  YOUR  ACCOUNT  NUMBER,  ...  " 

!  INVALID  HOST  NAME<SPXSPXSP> 

outnup  !  user  enters  ident 
!  <ident> 

outnup  !  outcome  of  join 
!  "ACCESS  GRANTED" 

outnup  !  conf  security  classification 
!  "CONFERENCE  SECURITY  CLASSIFICATION  . 


Cl 1 1 50  C11010  D11140  SNVN  TLCF  outnup  !  message  announcement  status 


Til  150 

C11160 

FNNVSE 

0 

0 

T1 1151 

Cl 11 60 

VSNVSE 

0 

0 

Cl  1 1 60 

C11010 

Dll 140 

SNVN 

TLCF 

Til 160 

Cl 11 70 

VSNVSE 

0 

0 

Cl 1 1 70 

C11010 

D11140 

SNVN 

TLCF 

TI 1 1 70 

Cl 11 80 

VSNVSE 

0 

0 

Cl 1 1 80 

Cl  2000 

D11180 

SNVN 

TLCF 

T1 1 1 80 

C11510 

VSNVSE 

0 

0 

Cl  1500 

C12000 

Dll 180 

SNVN 

TLCF 

Til  500 

C11510 

VSNVSE 

0 

0 

C1151Q 

Cl 2000 

D11510 

BRVN 

TLCF 

Til  510 

C11510 

VSNVSE 

0 

0 

Til  190 

C11510 

VSNVSE 

0 

0 

Til  191 

C11510 

VSNVSE 

0 

0 

Til 040 

C11510 

VNNVUE 

0 

0 

Cl  2000 

Cl 2000 

D12000 

SNVN 

TLCF 

T12000 

C12010 

FNNVSE 

0 

0 

TI 2001 

Cl  2010 

FNNVSE 

0 

0 

TI 2000 

Cl  2010 

VSNVSE 

0 

0 

Cl  2010 

Cl 2000 

D40 

UNVN 

TLCF 

TI 2022 

C12500 

VSNVUE 

0 

0 

TI 201 2 

C12100 

VSNVUE 

0 

0 

T12010 

Cl 2040 

VSNVUE 

0 

0 

TI  201 1 

Cl 2060 

VSNVUE 

0 

0 

TI  2013 

Cl 2200 

VSNVUE 

0 

0 

TI  2014 

Cl  2240 

VSNVUE 

0 

0 

TI 201 5 

Cl 1500 

VSNVUE 

0 

0 

TI  2016 

C12250 

VSNVUE 

0 

0 

TI 201 7 

C12350 

VSNVUE 

0 

0 

TI  201 8 

Cl 2360 

VSNVUE 

0 

0 

TI  2019. 

Cl 2450 

VSNVUE 

0 

0 

TI 2020 

Cl 3000 

VSNVUE 

0 

0 

TI 2021 

Cl 2470 

VSNVUE 

0 

0 

!  "THERE  ARE  NO  ANNOUNCMENTS  AT  THIS  TI 
!  "ANNOUNCEMENT  MESSA6E  NUMBERS  ARE  ... 

outnup  !  current  message  status 
•  "LATEST  MESSAGE  NUMBER  IS  n" 

outnup  !  previous  message  status 
!  "LAST  MESSAGE  SEEN  WAS  NUMBER  n" 

outnup  !  listen  mode  entered  initially 
!  "LISTEN  MODE  ENTERED  IN  ...  " 

outnup  !  listen  mode  entered  subsequen 
!  "LISTEN  MODE  ENTERED  IN  ...  " 

!  listen  mode  polling 
!<NP> 

!<dtg>  <name>  HAS  JOINED  THE  CONFERENCE 
!<dtg>  <name>  HAS  LEFT  THE  CONFERENCE<S 
!  (any  user  input  is  accepted  and  ignor 

outnup  !  command  mode  entered 
!  "COMMAND  ?" 

!  "COMMAND  ?"  (preceded  by  form  feed) 

!  "COMMAND  ?"  (preceded  by  message) 

outnup  !  user  enters  command 
!  desc(ribe) 

!  defi(nition) 

!  bull(etin) 

!  comm (uni cation) 

!  floo(r) 

!  give(up) 

!  list(en) 

!  prin(t) 

!  quit 
!  revi (ew) 

!  stat(us) 

!  talk 
!  ? 


Cl 2040  Cl 2000  01 2040  SNFN  TLCF  outnup  !  bulletin  verb 

T12040  Cl 2000  FSNVSE  0  21  !  "NO  MESSAGES  WAITING" 

T12041  C12050  FNNVSE  0  0  !  "MESSAGE  NUMBER" 

C12Q5Q  C12000  D12050  SRVN  TLCF  outnup  !  bulletin  message 

Til  600  C12050  VSNVSE  0  0  !<CRXNLXNP> 

TI 2050  C1201Q  VSNVSE  0  0  !  "COMMAND  ?" 

C12060  C12000  D12Q60  SNFN  TLCF  outnup  !  communication 


T12060 

Cl 2070 

FSNVSE 

0 

92 

!  "ENTER  ONE  LINE  PER  PROMPT  (-)  ...  " 

T12061 

Cl 2000 

FSNVSE 

0 

34 

!  "INVALIO  COMMUNICATION  ARGUMENT" 

Cl 2070 

Cl 2000 

012070 

SNVN 

TLCF 

outnup  !  comm  input  prompt 

T12070 

Cl 2080 

FSNVSE 

0 

3 

|  M.ll 

T12071 

Cl 2000 

FSNVSE 

0 

22 

!  "COMMUNICATION  SENT" 

T12072 

Cl 2000 

FSNVSE 

0 

34 

!  "COMMUNICATION  REQUEST  IGNORED" 

T12000 

Cl 2010 

VSNVSE 

0 

0 

!  "COMMAND  ?"  (preceded  by  msg) 

Cl 2080 

Cl 2000 

040 

UNFN 

TLCF 

outnup  !  user  comm  input 

Til 040 

Cl 2070 

VNNVUE 

0 

0 

!  (any  user  input) 

Cl  2100 

Cl 2000 

012100 

SRVN 

TLCF 

outnup  !  definition  output 

T12100 

Cl  2010 

FNNVSE 

0 

0 

!  "FLOOR  RECORDING  IS  OFF" 

T12101 

C12010 

FNNVSE 

0 

0 

!  "FLOOR  RECORDING  IS  ON" 

T12102 

C12010 

FNNVSE 

0 

0 

!  "CONFERENCE  IS  OPEN  TO  JOINING  ..." 

T12103 

Cl  2010 

FNNVSE 

0 

0 

!  "CONFERENCE  IS  CLOSED  TO  JOINING  ... 

T12104 

Cl  2010 

FNNVSE 

0 

0 

!  "OPTION  RESTRICTED  TO  INITIATING  ... 

T12105 

Cl 2010 

FNNVSE 

0 

0 

!  "OPTION  RESTRICTED  TO  CURRENT  ...  " 

T12106 

C12010 

FNNVSE 

0 

0 

!  "NO  ALTERNATES  HAVE  BEEN  ASSIGNED" 

T12107 

C12110 

VSNVSE 

0 

0 

!  "  ...  CHANGE?" 

T12108 

Cl 21 00 

VSNVSE 

U 

0 

*  "  ...  FILE  INSERT  LIMIT  IS~  ..." 

T12000 

Cl  2010 

VSNVSE 

0 

0 

!  "COMMAND  ?"  (preceded  by  anything) 

Cl  21 10 

Cl 2000 

040 

UNVN 

TLCF 

outnup  1  user  responds  to  definition  p 

Til  040 

C12120 

VNNVUE 

0 

0 

!  user  response 

C12120 

Cl 2000 

012120 

SNVN 

TLCF 

outnup  !  system  response  to  user  input 

T12000 

C12010 

FNNVSE 

0 

0 

!  "COMMAND  ?"  (only) 

T12120 

C12110 

FSNVSE 

0 

12 

!  "HOST?" 

T12121 

Cl  21 1 0 

FSNVSE 

0 

11 

!  "SIDENT?" 

T12122 

C12110 

FSNVSE 

0 

54 

!  "NEW  IDENT  CARD  NOT  VALID  AT  THIS  ... 

T12000 

C12010 

VSNVSE 

0 

0 

!  "COMMAND  ?"  (preceded  by  anything) 

Cl  2200 

Cl 2000 

D12200 

SNVN 

TLCF 

outnup  !  floor  response 

T12200 

C12210 

FSNVSE 

0 

53 

!  "ENTER  ONE  LINE  OF  TEXT  ..." 

T12201 

Cl 2000 

FSNVSE 

0 

54 

!  "CHAIRMAN  NOT  PRESENT  ..." 

T12202 

Cl  2000 

FSNVSE 

0 

30 

!  "FLOOR  INVALID  COMMAND" 

T12203 

C12010 

VSNVSE 

0 

0 

!  "INVALID  FLOOR  COMMAND  ..." 

T12000 

C12010 

VSNVSE 

0 

0 

!  "COMMAND  ?"  (preceded  by  anything) 

C12210 

Cl 2000 

012210 

SNFN 

TLCF 

outnup  !  floor  prompt  for  input 

T12210 

C12220 

FSNVSE 

0 

62 

!  "(ENTER  BREAK  STATUS  OR  NULL  ...)" 

Cl  2220 

Cl 2000 

040 

UNVN 

TLCF 

outnup  !  floor  request  input  ! 

Til  040 

C12230 

VNNVUE 

0 

0 

!  < line  of  input  to  accompany  floor  req 

Cl  2230 

Cl  2000 

01 2230 

SNFN 

TLCF 

outnup  !  floor  request  acknowledged 

T1 2230 

Cl 2000 

FSNVSE 

0 

64 

!  "CHAIRMAN'S  APPROVAL  ..." 

Cl  2240 

Cl 2000 

D12240 

SNFN 

TLCF 

T12240 

Cl  2000 

FSNVSE 

0 

30 

Cl 2250 

Cl 2000 

D12250 

SNVN 

TLCF 

T12250 

Cl 2000 

FSNVSE 

0 

38 

T12251 

Cl 2000 

FSNVSE 

0 

26 

T12252 

Cl  2260 

VSNVSE 

0 

0 

T12000 

C12010 

VSNVSE 

0 

0 

Cl 2260 

Cl 2000 

D40 

UNVN 

TLCF 

Til  040 

C12270 

VNNVUE 

0 

0 

C12270 

C12000 

D12270 

SNVN 

TLCF 

T12270 

Cl  2260 

FSNVSE 

0 

46 

T12271 

Cl 2270 

FSNVSE 

0 

22 

T12272 

Cl 2260 

VSNVSE 

0 

0 

T12273 

C12260 

FSNVSE 

0 

52 

T12274 

C12260 

FSNVSE 

0 

80 

T12000 

C12010 

VSNVSE 

0 

0 

Cl  2350 

Cl  2000 

D12350 

SNFN 

TLCF 

T12350 

C999 

FSNVSE 

0 

18 

Cl 2 360 

Cl 2000 

D12360 

SNFN 

TLCF 

T1 2360 

Cl  2000 

FSNVSE 

0 

24 

Til  600 

C12050 

FNNVSE 

0 

0 

Cl  2450 

Cl  2000 

D12450 

SRVN 

TLCF 

T12050 

C12010 

VSNVSE 

0 

0 

Cl  2470 

Cl 2000 

D12450 

SRFN 

TLCF 

T12470 

C1201Q 

FSNVSE 

809 

9 

Cl  2500 

Cl 2000 

D12500 

SNFN 

TLCF 

T12500 

Cl 2600 

FSNVSE 

5 

14 

T12501 

C12610 

FSNVSt 

5 

14 

T12502 

Cl 2620 

FSNVSE 

5 

14 

T12503 

Cl 2630 

FSNVSE 

5 

14 

T12504 

Cl 2640 

FSNVSE 

5 

14 

T12505 

C12650 

FSNVSE 

5 

14 

T12506 

Cl 2660 

FSNVSE 

5 

14 

T12507 

Cl 2670 

FSNVSE 

5 

14 

T12508 

Cl 2680 

FSNVSE 

5 

14 

T12509 

Cl  2690 

FSNVSE 

5 

14 

T12510 

Cl 2700 

FSNVSE 

5 

14 

T12511 

C12710 

FSNVSE 

5 

14 

T12512 

C12720 

FSNVSE 

5 

14 

T12513 

C12730 

FSNVSE 

5 

14 

T1 2514 

Cl  2740 

FSNVSE 

5 

14 

T12515 

C12750 

FSNVSE 

5 

14 

outnup  !  giveup  response 
«  "COMMAND  VALID  FOR  FLOOR  ONLY" 

outnup  !  print  response 
!  "PRINT  REQUEST  INCOMPLETE  OR  INVALID" 
!  "MESSAGE  NUMBER  TOO  HIGH" 

!  "  ...  CHANGE?" 

!  "COMMAND  ?"  (preceded  by  anything) 

outnup  !  user  enters  info  to  prompt 
!  (any  user  input) 

outnup  !  print  request  prompts 
!  "ENTER  HOST  NAME  FOR  DELIVERY  ..." 

«  "INVALID  HOST  NAME" 

!  "  ...  CHANGE?  " 

!  "ENTER  YOUR  ACCOUNT  NUMBER,  NAME  ... 

!  "IDENT  INFORMATION  NOT  VALID  ...  " 

!  "COMMAND  ?"  (preceded  by  anything) 

outnup  !  quit 
!  "QUIT  SUCCESSFUL" 

outnup  !  review 
!  "INVALID  REVIEW  REQUEST" 

!  <CRXNLXNP> 

outnup  !  status 
!  "COMMAND  ?" 

outnup  !  ?  output 
!  "this  Terminal  is  currently  ..." 

outnup  !  determine  describe  output 
!  "»>ADD«<" 

!  "»>ADJ  OURN«<" 

!  "»>ANNOUNCE«<" 

!  "»>BULLETIN<«" 

•  "»>CHAIR  T0«<" 

!  "»>COMMUNICATION<«" 

!  ">»DE FINITI0N«<" 

!  "»>DELETE«<" 

!  "»>DESCRIBE«<" 

!  ">»ERASE«<" 

!  "»>FLOOR«<” 

!  "»>  FORMAT «<" 

1  ">»GIVEUP<«" 

!  "»>INSERT«<" 

!  "»>KEYW0RD<«" 

!  "»>LISTEN«<" 


T1 2516 

Cl 2760 

FSNVSE 

5 

14 

!  "»>PDAC«<" 

T12517 

Cl 2770 

FSNVSE 

5 

14 

!  ">»PRINT<«" 

T12518 

Cl 2780 

FSNVSE 

5 

14 

!  "»>QUIT«<" 

T12519 

Cl  2790 

FSNVSE 

5 

14 

!  "»>REVIEW«<" 

T12520 

Cl 2800 

FSNVSE 

5 

14 

!  ">»ST ATUS«<" 

T12521 

C12810 

FSNVSE 

5 

14 

!  ">»TALK<«" 

T12522 

Cl  2820 

FSNVSE 

5 

14 

!  "»>TERMINATE<«" 

T12523 

Cl 2830 

FSNVSE 

5 

14 

!  "»>?<«" 

T12524 

C12470 

FSNVSE 

5 

14 

!  "INVALID  DESCRIBE  ARGUMENT  PASSED" 

Cl 2600 

Cl 2000 

012450 

SRFN 

TLCF 

outnup 

!  add  text 

T12600 

C12010 

FSNVSE 

471 

9 

!  "THIS 

VERB'S  USAGE  IS  RESTRICTED  ... 

C12610 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  adjourn  text 

T12610 

C12Q10 

FSNVSE 

454 

9 

!  "THIS 

VERB'S  USAGE  IS  RESTRICTED  ... 

Cl  2620 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  announce  text 

T1 2620 

C12010 

FSNVSE 

589 

9 

!  "THIS 

VERB'S  USAGE  IS  RESTRICTED  ... 

Cl 2630 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  bulletin  text 

T12630 

C12010 

FSNVSE 

240 

9 

!  "THIS 

VERB  ALLOWS  AN  INDIVIDUAL  ... 

Cl  2640 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  chair  to  text 

T1 2640 

C12010 

FSNVSE 

822 

9 

!  "THIS 

VERB'S  USAGE  IS  RESTRICTED  ... 

Cl  2650 

Cl 2000 

012450 

SRFN 

TLCF 

outnup 

!  communication  text 

T12650 

Cl 2010 

FSNVSE 

918 

9 

!  "THIS 

VERB  WILL  ALLOW  INFORMAL  ...  " 

Cl  2660 

Cl 2000 

012450 

SRFN 

TLCF 

outnup 

!  definition  text 

T1 2660 

C12010 

FSNVSE 

2644 

9 

!  "THIS 

VERB  DISPLAYS  THE  STATE  ..." 

Cl 2670 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  delete  text 

T1 2670 

C12010 

FSNVSE 

360 

9 

!  "THIS 

COMMAND  ALLOWS  THE  ...  " 

Cl  2680 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  describe  text 

T1 2680 

C12010 

FSNVSE 

572 

9 

!  "THIS 

VERB  IS  USED  TO  OBTAIN  ..." 

Cl  2690 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  erase  text 

T12690 

C12010 

FSNVSE 

289 

9 

!  "THIS 

COMMAND  IS  USED  BY  THE  ...  " 

Cl  2700 

Cl  2000 

D12450 

SRFN 

TLCF 

outnup 

!  floor  text 

T12700 

C12010 

FSNVSE 

1311 

9 

!  "THE  PURPOSE  OF  THE  FLOOR  ..." 

C12710 

Cl 2000 

01 2450 

SRFN 

TLCF 

outnup 

!  format  text 

T12710 

C12010 

FSNVSE 

685 

9 

!  "THIS 

COMMAND  IS  USED  BY  THE  ...  " 

Cl  2720 

Cl  2000 

012450 

SRFN 

TLCF 

outnup 

!  giveup  text 

T12720 

C12010 

FSNVSE 

181 

9 

!  "THIS 

VERB  ALLOWS  A  PARTICIPANT  ... 

Cl  2730  Cl  2000  012450  SRFN 


TLCF  outnup  !  insert  text 


T12730 

C12010 

FSNVSE 

618 

9 

Cl  2740 

Cl  2000 

D12450 

SRFN 

TLCF 

T12740 

Cl 2010 

FSNVSE 

528 

9 

Cl 2750 

Cl 2000 

D12450 

SRFN 

TLCF 

T12750 

C12010 

FSNVSE 

328 

9 

Cl  2760 

Cl 2000 

012450 

SRFN 

TLCF 

T12760 

C12010 

FSNVSE 

561 

9 

Cl  2770 

Cl 2000 

D12450 

SRFN 

TLCF 

T12770 

C12010 

FSNVSE 

1868 

9 

Cl 2780 

Cl 2000 

D12450 

SRFN 

TLCF 

T12780 

C12010 

FSNVSE 

115 

9 

Cl  2790 

Cl 2000 

D12450 

SRFN 

TLCF 

T12790 

C12010 

FSNVSE 

1265 

9 

Cl  2800 

Cl 2000 

D12450 

SRFN 

TLCF 

T1 2800 

C12010 

FSNVSE 

294 

9 

C12810 

Cl 2000 

D12450 

SRFN 

TLCF 

T12810 

C12010 

FSNVSE 

233 

9 

Cl  2820 

Cl 2000 

D12450 

SRFN 

TLCF 

T12820 

C12010 

FSNVSE 

422 

9 

Cl  2830 

Cl  2000 

D12450 

SRFN 

TLCF 

T12830 

Cl 2010 

FSNVSE 

173 

9 

Cl 3000 

C13500 

D13000 

SNVN 

TLCF 

T13000 

C13010 

VSNVSE 

0 

0 

C13010 

C13500 

D13010 

SNFN 

TLCF 

T13Q10 

C13050 

FSNVSE 

0 

3 

T13011 

C13050 

FSNVSE 

0 

3 

T13012 

C13020 

FNNVSE 

0 

0 

T13012 

C13020 

VSNVSE 

0 

0 

T13013 

Cl 3020 

FSNVSE 

U 

7 

T13014 

Cl 3020 

FSNVSE 

0 

10 

T13015 

C13020 

FSNVSE 

0 

8 

T13016 

Cl 3020 

FSNVSE 

0 

7 

T13017 

Cl 3020 

FSNVSE 

0 

6 

Cl 3020 

C13500 

D40 

UNVN 

TLCF 

Til 040 

Cl 3030 

VNNVUE 

0 

0 

!  "THIS  IS  A  CHAIRMAN  ONLY  VERB  ..." 

outnup  !  keyword  text 
•  "MESSAGES  MAY  BE  ASSIGNED  A  ...  " 

outnup  !  listen  text 
!  "TO  RECEIVE  CONFERENCE  MESSAGES  ... 

outnup  !  pdac  text 
!  "THIS  VERB  OPENS  A  CONNECTION  ..." 

outnup  !  print  text 
!  "THIS  VERB  ALLOWS  AN  INDIVIDUAL  ... 

outnup  !  quit  text 
!  "THIS  VERB  DISCONNECTS  A  ...  " 

outnup  !  review  text 
!  "THIS  VERB  ALLOWS  A  SELECTIVE  ..." 

outnup  !  status  text 
!  "THIS  VERB  PRODUCES  A  REPORT  ..." 

outnup  !  talk  text 
!  "THIS  VERB  TRANSFERS  A  ...  " 

outnup  !  terminate  text 
!  "THIS  VERB'S  USAGE  IS  RESTRICTED  ... 

outnup  !  ?  text 

!  "THE  QUESTION  MARK  IS  USED  ..." 

outnup  !  talk  mode  entered 
!  "TALK  MODE  ENTERED  IN  ...  " 

outnup  !  talk  mode  prompt 
!  ">"  (talk  mode  prompt) 
j  (alternate  talk  mode  prompt) 
!<CRXNL>TO? 

!<CRXNL>TO? 

!  "FROM?" 

!  "SUBJECT?" 

!  "CLASS?" 

!  "INFO?" 

!  "REF?" 

outnup  !  user  enters  format  info 
!  (anything  is  valid) 


C13030  C13500  D13010  SNFN  TLCF  outnup  !  complete  message  formatting 


T13010 

C13050 

FSNVSE 

0 

3 

T13011 

C13020 

FSNVSE 

0 

3 

T13012 

Cl 3020 

FSNVSE 

0 

5 

T13013 

Cl 3020 

FSNVSE 

0 

7 

T13014 

C13020 

FSNVSE 

0 

10 

T13015 

Cl 3020 

FSNVSE 

0 

8 

T13016 

Cl 3020 

FSNVSE 

0 

7 

T13017 

C13020 

FSNVSE 

0 

6 

Cl 3050 

Cl 3500 

D40 

UNVN 

TLCF 

T13050 

C13100 

VSNVUE 

0 

0 

T13051 

Cl 2000 

VSNVUE 

0 

0 

T13052 

C13300 

VSNVUE 

0 

0 

T13053 

Cl 3320 

VSNVUE 

0 

0 

T12080 

C13320 

FNNVUE 

0 

0 

T13054 

C13340 

VSNVUE 

0 

0 

T13055 

Cl 3360 

VSNVUE 

0 

0 

T13056 

Cl 3380 

VSNVUE 

0 

0 

T13057 

C13410 

VSNVUE 

0 

0 

T13058 

C13210 

FNNVUE 

0 

0 

Til 040 

Cl 3010 

VNNVUE 

0 

0 

Cl 3100 

C13500 

D13100 

SNFN 

TLCF 

T13100 

C13110 

FSNVSE 

5 

14 

T13101 

C13120 

FSNVSE 

5 

14 

T13102 

Cl 31 30 

FSNVSE 

5 

14 

T13103 

C13140 

FSNVSE 

5 

14 

T13104 

Cl 31 50 

FSNVSE 

5 

14 

T13105 

C13160 

FSNVSE 

5 

14 

T13106 

Cl  31 70 

FSNVSE 

5 

14 

T13107 

Cl 31 80 

FSNVSE 

5 

14 

T13108 

C13190 

FSNVSE 

5 

14 

T13109 

C13200 

FSNVSE 

5 

14 

T13099 

C13210 

FSNVSE 

5 

14 

Cl  31 10 

Cl 3500 

D560 

SRFN 

TLCF 

T13110 

Cl  3010 

FSNVSE 

358 

10 

C13120 

Cl 3500 

D560 

SRFN 

TLCF 

T13120 

C13010 

FSNVSE 

159 

17 

Cl 31 30 

Cl 3500 

D560 

SRFN 

TLCF 

T13130 

Cl 3010 

FSNVSE 

110 

14 

Cl  3140 

C13500 

D560 

SRFN 

TLCF 

T13140 

C13010 

FSNVSE 

357 

10 

Cl  31 50 

C13500 

D560 

SRFN 

TLCF 

T13150 

C13010 

FSNVSE 

214 

10 

!  ">"  (talk  mode  prompt) 

!  (msg  format  prompt) 

,  ..T0?» 

!  '‘FROM?’* 
i  "SUBJECT?" 

!  "CLASS?" 

!  "INFO?" 

!  "REF?" 

outnup  !  user  enters  talk  mode  command 
!  Sdesc(ribe) 

!  $comm(and) 

!  Sdele(te) 

!  Send 

!  <carriage  return>  (same  as  Send) 

!  Slist 
!  Ssele(ct) 

!  Ssubj(ect) 

!  Stalk 

i  •> 

!  (anything  else  is  part  of  a  message) 

outnup  !  determine  describe  output 
!  ">»$DE  S  CR  IBE«<" 

!  "»>S CQMMAND«<" 

!  "»>SDELETE«<" 

!  ">»SEN0«<" 
i  "»>SLI  ST<«" 

!  "»>SSELECT«<" 

!  "»>SSUBJ  E  CT «<" 

!  ">»STALK«<" 

!  ">»  ?  «" 

!  "»>SINSERT«<" 

!  "INVALID  DESCRIBE  ARGUMENT  PASSED" 

outnup  !  Sdescribe  text 
!  "THIS  PARAMETER  IS  USED  TO  OBTAIN  ... 

outnup  !  Scommand  text 
!  "THIS  PARAMETER  WILL  CAUSE  A  ...  " 

outnup  !  Sdelete  text 
!  "THIS  PARAMETER  WILL  CAUSE  THE  ...  " 

outnup  !  Send  text 
•  "THIS  PARAMETER  WILL  CAUSE  A  ...  " 

outnup  !  Slist  text 
!  "SLIST  AS  THE  FIRST  CHARACTERS  ..." 


C13160 

Cl 3500 

D560 

SRFN 

TLCF 

T1316Q 

C13010 

FSNVSE 

256 

10 

Cl  31 70 

C13500 

D560 

SRFN 

TLCF 

T1317Q 

C13010 

FSNVSE 

300 

20 

Cl  31 80 

Cl 3500 

D560 

SRFN 

TLCF 

T13180 

C13010 

FSNVSE 

233 

7 

Cl  31 90 

Cl 3500 

D13190 

SRFN 

TLCF 

T13190 

C13010 

FSNVSE 

143 

15 

C13200 

Cl  3500 

D560 

SRFN 

TLCF 

T13200 

Cl 3010 

FSNVSE 

636 

27 

Cl  3210 

Cl 3500 

D560 

SRFN 

TLCF 

T13210 

Cl  3010 

FSNVSE 

855 

19 

Cl 3300 

C13500 

D13300 

SNVN 

TLCF 

T13300 

C13300 

FNNVSE 

0 

0 

T13300 

Cl 3300 

VSNVSE 

0 

0 

T1 2000 

Cl  2010 

FSNVSE 

2 

9 

Til  500 

C11510 

VSNVSE 

0 

0 

Cl  3320 

C13500 

D13320 

SNFN 

TLCF 

T13320 

C13330 

FSNVSE 

0 

18 

Cl 3330 

C13500 

D13330 

SRVN 

TLCF 

Til  500 

C11510 

VSNVSE 

0 

0 

T12000 

Cl 2010 

VSNVSE 

0 

0 

Cl 3340 

C13500 

D13340 

SRVN 

TLCF 

T13340 

Cl 3050 

FSNVSE 

2 

24 

T13010 

C13050 

VSNVSE 

0 

0 

Cl 3360 

C13500 

D13360 

SNVN 

TLCF 

T13360 

C13010 

FSNVSE 

0 

55 

T13010 

C13050 

VSNVSE 

0 

0 

T13011 

C13050 

VSNVSE 

0 

0 

Cl 3380 

C13500 

D13000 

SNFN 

TLCF 

T13380 

Cl 3020 

FSNVSE 

0 

3 

T13381 

C13050 

FSNVSE 

0 

48 

C13410 

C13500 

D13410 

SNFN 

TLCF 

T13320 

Cl 3420 

FSNVSE 

0 

18 

T13430 

C13410 

FNNVSE 

0 

0 

T13010 

Cl 3050 

FNNVSE 

0 

0 

T13010 

C13050 

VSNVSE 

0 

0 

outnup  !  Sselect  text 
!  "THIS  VERB  ALLOWS  A  PARTICIPANT  " 

outnup  !  Ssubject  text 
*  "THIS  VERB  ALLOWS  A  PARTICIPANT  ...  " 

outnup  !  Stalk  text 
i  "THIS  PARAMETER  WILL  CAUSE  A  ...  " 

outnup  !  ?  text 

1  "THE  QUESTION  MARK  IS  USED  ..." 

outnup  !  Sinsert  text 
!  "THIS  PARAMETER  ALLOWS  PREVIOUSLY  ... 

outnup  !  ?  or  bad  describe  argument 
!  "THIS  TERMINAL  IS  CURRENTLY  ..." 

outnup  !  Sdelete  command 
! <CR><NL>MESS AGE  DELETED  BY  PARTICIPANT 
!<CRXNL>MESSAGE  DELETED  BY  PARTICIPANT 
!  "COMMAND  ?"  (command  mode  entered) 

!  "LISTEN  MODE  ENTERED  IN  ...  " 

outnup  !  Send  command 
!  "MESSAGE  ACCEPTED" 

outnup  l  leave  talk  mode 
!  "LISTEN  MODE  ENTERED  IN  ...  " 

!  "COMMAND  ?" 

outnup  !  Slist  command 
!  "NO  TEXT  HAS  BEEN  ENTERED" 

!  ">"  (talk  mode  prompt) 

outnup  !  Sselect  command 
!  "...  NO  PARTICIPANT  NAMES" 
i  ">"  (talk  mode  prompt) 

;  (alternate  talk  mode  prompt) 

outnup  !  Ssubject  command 

|  II.H 

!  "INVALID  SUBJECT  REQUEST—..." 

outnup  !  Stalk  command 
!  "MESSAGE  ACCEPTED" 

! CONTINUING  IN  TALK  MODE<SP> 

!<CRXNL» 

!<CRXNL»  preceded  by  message 


C1342Q 

Cl 3500 

D13420 

SNVN 

TLCF 

T13420 

C13430 

VSNVSE 

0 

0 

Cl 3430 

C13500 

D13430 

SNFN 

TLCF 

T13430 

C13010 

FNNVSE 

0 

0 

C13500 

C13500 

013300 

SNVN 

TLCF 

T13300 

C13510 

FNNVSE 

0 

0 

T13300 

C13510 

VSNVSE 

0 

0 

T12000 

C12010 

FSNVSE 

0 

9 

Til  500 

Cl 1 51 0 

VSNVSE 

0 

0 

C13510 

C13500 

D40 

UNVN 

TLCF 

Til  040 

Cl 1500 

VNNVUE 

0 

0 

outnup  !  message  number  assigned 
!  "MESSAGE  NUMBER  ..." 

outnup  !  return  to  talk  mode 
!  "CONTINUING  IN  TALK  MODE" 

outnup  !  user  entered  a  break 
!<CRXNL>MESSAGE  DELETED  BY  PARTICIPANT 
!<CRXNL>MESSA6E  DELETED  BY  PARTICIPANT 
!  "COMMAND  ?"  (command  mode  entered) 

!  "LISTEN  MODE  ENTERED  IN  ...  " 

outnup  !  user  enters  carriage  return 
!  (anything) 


A. 5. 2  Source  Halting  Delimiter  File  (tiHDEL) 


T  CHARACTER* 

LONG* 

TION* 

E  SAVE** 

i  “ 

DY  “ 

ERS* 

W-* 

E  SAVE** 

I cr I |nl| *“ 

I cr | | nL| ““ 

| cr 1 1 nil  INVALID  COMMAND  AT  THIS  LEVEL 

I cr | | nil* 

TED  “* 

?  * 

E | cr | | nl | * 

R  | cr | | nl | “ 

LEVEL  “ 

R  FILE  “ 

?  ** 

R  FILE  " 

R 

OB  ^ 

E  " 

R  Icrllnll** 


I nl | | nl | 

cp*. 


Inlllnll 


01 030  |  ||  ||  r* 


1 


1 


1 


a 


a 


1 


•j‘i 

Jm 

a 


si 


a 


< » 


01050 


01 200 


01240 


01 300 


06120 


06140 


06160 


06340 


07000 


09020 


09040 


INPUT  CHARACTER' 
'  TOO  LONG** 


RWHlcrl* 

STATED** 


INPUT  CHARACTER' 
•  TOO  LONG* 

E  PERMISSION** 


EXIST* 

FUL.  “ 

INPUT  CHARACTER' 
*  TOO  LONG* 
STATED** 


06000  E | n  L | |cr|“* 


|  | | nl | | cr | “ 
E | nl | | cr | * 
Y|nL| |cr |*“ 


l  llnlllcrl* 
o |nl | | cr I ““ 


0|nl| | cr | “ 
Unlllcrl** 


06260  |  ||  ||  Hnlllcrl- 


I  llnlllcrl* 
R|nl| | cr | “" 


ylcrl |nl|* 
cter* 

NED | cr | |nl|“ 

n 


09030  | cr I | nil*** 


09045  I cr 1 1 nl | =*“ 


A  -  55 


i 


t 


[*!' 


Bs* 

h 

I 


:? 


i 


i 


£ 

W 


£ 


y 


09050 

m 

1  cp | |nl|*““ 

09060 

1 cp | |nl|=" 

| cr | | nl|*““ 

09061 

** 

0  ** 

09063 

E | cp | | nl | *“ 

09064 

?“* 

09065 

TEM“* 

09070 

I cp| |nl|*“ 
Icpllnll* 

?  ** 

? 

LESS* 

I cr 1 1 cr 1 1 n  L | 

of  74* 
of  SS* 
found* 
Icr||nl|“* 

t |cr | |nl| * 
*“* 


?" 

busy* 
found" “ 

I crl |nl|*“ 

|cp | | nl | * 

Ibelll IbeLLl | belli (belli | belli |bell| 
TEM* 

ALLY"* 

I  | | cp | | nl | * 

CODE"" 

JOIN?"* 

JOIN?" 


A  -  56 


09097 
091 00 

D9120 

011000 

011010 

011030 


09080 


09095 


09096 


011050  NAME?  * 
SESSION** 

011070  ZMA|cr|* 

NIZED* 

DENIED 

011090  COPY 

GRANTED  * 

OENIEO 

ZMA|cr|““ 

011110  NAME 

CARD  * 

CARO—** 

01 1 1 30 

011140  |cr  |“* 

011180  | cp | |nl | ““ 

011190  CONFERENCE  ** 

011510  | cr | |nl | * 

CONFERENCE  * 

012000  COMMAND  ?““ 

012040  WAITING* 

MESSAGE  NUMBER*' 

012050  | cr | | nl| | ff |* 

Icr I jnl |“ 
COMMAND  ?*" 

D12060  AGE 

ENT  *" 

012070  -* 

SENT  “ 

IGNORED 
COMMAND  ?** 

0121 00  COMMAND  ?" 

CHANGE?  |cr | | nil 
LIMIT  IS—  "* 


012120  ?  |cr||nl|" 

?  Icrllnll* 

?  Icrllnll* 


COMMAND  ?““ 

012200 

MANO* 

LEGE* 

?*“ 

012210 

) 1 cr | |nl | “* 

012230 

TIVITY** 

012240 

ONLY** 

012250 

VALID  * 

HIGH  * 

CHANGE?* 

COMMAND  ?*“ 

012270 

COPY 

NAME 

CHANGE?  “ 

CARD  |cr||nl| 

NO)?* 

COMMAND  ?"“ 

012350 

FUL  *" 

012360 

EST  " 

Iff  |  — 

012450 

1  n  1 1  * 

012500 

Icrllnll* 

<1  crl |nlj“ 
PASSED** 

013000 

lyyl"‘ 

D13010 

>" 

013100  > | cr | | nl| 
I cr | jnl| 
PASSED*" 


013190  Icrllnll 


UNCTION 


v 


D13300 

D13320 

013330 

013340 

013360 

013400 

013410 

013420 

013430 

013440 


PANT  " 

|cr|  |nir 
NANO  ?"" 

TED*" 

lyyl  | cr | | nil 
COMMAND  ?““ 

ENTERED" 

I  c  r | |nl|>“ 

Icri jnlj-" 

I  c  r  | 

NAME  S | c  r | |nl|“ 
|cr| |nl|>" 

I cr | |nl|-““ 

I cr | | 

I  cr 1 1 nl |>“ 

MODE  " 
ACCEPTEO"" 

|cr||nl|“" 

MODE  “ 

I cr | |nl | | ff |“* 


A. 5. 3  Source  Text  String  File  (GTEXT) 


Long  text  string  lines  have  been  "wrapped  around"  onto  the  next  line  in 
order  to  fit  onto  the  page.  This  wrapping  is  indicated  by  the  characters 
"->"  at  the  end  of  a  line. 

T1 

T2  | cr 1 1 nl| 131 6400 1 c  r | |nl|  “ 

T10  | cr | | nl| PROGRAM  NAME 

T20  tsslcrl* 

T21  tlcf|cr|“ 

T30  | cr | | nl| TERMINAL  “ 

T40  | cr| |nl|“ 

T50  USER I DSP ASS WORD? | cr | | nl| |cr| |nl| 

*%&<X#>?*#S%#?AM*5*48#N&#| cr | 

TXOGWBMWEPVRMCBQNKMGAKZMA| cr | “ 


T51 

LOCKED | cr  | " 

T60 

r 

T61 

s* 

T90 

I  crl  |nl|lDENT?|cr|  |nir 

T1 00 

A 

• 

T110 

| crl | nil  CLASSIFICATION  OF 

YOUR  OUTPUT? | cr| 

|nl  r 

Till 

I crl |nl|classification  of 

your  output?| cr| 

Ini  |“ 

T120 

zzz|cr|" 

T121 

uzzlcr 1" 

T122  ufolcrl 


T130  | cr | | nl| CLASSIFICATION  OF  FILES  YOU  WILL  CREATE? | cr | | nl | 
T131  | cr | | nl | cLassi f icat ion  of  files  you  will  create? | cr 1 1 nl | 

T132  | cr | | nl| ILLEGAL  CLASSIFICATION  CODE* 

T133  | cr | | nl | illegal  classification  code* 

T150  | cr 1 1 nil  SYSTEM  ?“ 

T151  | nl | | cr | | cr | | nl | SYSTEM  ?“ 

T160  acce|cr|* 

T161  acces|cr|“ 

T162  access|cr|* 

T163  list  * 

T164  sios|cr|" 

T165  tcon|cr|" 

T166  wwdmlcrl" 

T167  wwdms |cr|“ 

T168  bye|cr|“ 

T169  list l  * 

T170  list | cr | “ 

T171  listllcrl* 

T172  wwdm  n|cr|* 

T173  wwdms  n|cr|* 

T174  wwdm  new|cr|“ 

T175  wwdms  new|cr|“ 


T991  | cr | | nl|  LINE  TERMINATED  CP 


T995  |cr||nl|**on  at  * 

T1000  | cr | | nil | nL|  FUNCTION?  “ 

T1020  mf  |  cr  |  * 

T1021  fm|cr|* 

T1022  done  |  cr  |* 

T1023  | cr  1“ 

T1030  | cr I | nl|  CATALOG  STRUCTURE  TO  WORKING  LEVEL? | cr | | nl | 

T1040 

T1050  | cr | | nl |  FILE  TO  BE  MODIFIED?  * 

T1051  |  cr  |  |  nl  |  |  nl  |  ERR-" 

T1060  /* 

T1070  | cr | | nl|  NEW  NAME?  * 

T1090  | cr | | nl|  NEW  MAX  SIZE  IN  LLINKS?  “ 

T1200  | cr | | nl | NEW  PASSWORD? | cr | |nl| 

a%&<%#>?#as?.&#|cr| 

TXOGWBMWEPVRWM |  cr  |  “ 

T1201  | cr | | nl | | nl | ERR — MAX  SIZE  ILLEGALLY  STATED" 

T1220  | cr | | nl|  GENERAL  PERMISSIONS?  “ 

T1230  readier  I" 

T1231  r | cr I " 

T1232  executelcrl" 

T1233  elcrl" 

T1234  writelcrl" 

T1235  w | cr | * 

T1236  append|cr|* 

T1237  a  |  cr I  * 


T1238  modifylcrl* 

T1239  m|cr|* 

T1240  |cr| |nl|  SPECIFIC  PERMISSIONS?  " 

T1250  read/" 

T1251  r/* 

T1252  write/" 

T1253  w /* 

T1254  append/" 

T1255  a/* 

T1256  execute/" 

T1257  e/" 

T1258  modify/" 

T1259  m/" 

T1300  | cr | | nL | MORE?  ‘ 

T1301  | cr I | nl|  SUCCESSFUL." 

T1302  | cr | | nl | | nl | ERR-PERMISSIONS  ILLEGALLY  STATED" 

T1303  | cr I | nl| I nl| REQUEST  DENIED-" 

T1320  | cr I | nl| | nl|  FILE  TO  BE  MODIFIED?  " 

T2000  |cr||nl|TCON  VERSION  6.3,  JUNE  1976  * 

T2001  | cr I | nl | FUNCTIONAL  AREA  ? 

T2002  | cr I | nl| TCON  VERSION  6.3,  JUNE  1976 

I cr 1 1 nl| FUNCTIONAL  AREA  ? 

T2020  | cr I | nl| NO  TEMPORARY  FILE  SPACE  CODE* 

T2030  fslcrl" 

T2040  demlcrl* 

T2050  | cr I | nil " 


T2060  0  * 


T2Q61 

T2062 

T2063 

T2064 

T2065 

T2066 

T2067 

T2068 

T2069 

T2100 

T2110 

T2120 

T2130 

T2140 

T2160 

T2161 

T2162 

T2180 

T2181 

T2190 

T2195 

T2196 

T2200 

T2201 


fflOTWCTfllWfWWffWWfiffWIt 


JW.  HIJ  JU  IVVIJIIJ  ■  11.1 


1  * 

2  * 

3  * 

4  * 

5  * 

6  * 

7  * 

8  " 

9  “ 

|cr|* 

I cr | | nL| OLD  OR  NEW-* 

I cr | | nl| FUNCTIONAL  AREA  BUSY  * 
new|cr|“ 
n|cr |“ 
o 

ol  * 


old  * 
same  |  cr  |* 
s|cr|* 

I cr | | nl | READY* 

—  NONEXISTENT* 

'  DOES  NOT  EXIST— USE  SAVE* 

I cr 1 1 nil | nl| | cr 1 1 nil  TRANSACTION  TYPE  ? 
| cr 1 1  nil  TRANSACTION  TYPE  ?  * 


A  -  64 


T2202  | cr 1 1 nil  TRANSACTION  TYPE  ? 


T2205  | cr | | nl| | nl| | cr | | nl| INVALID  TRANSACTION  TYPE  ON  RETRIEVE 

|cr  j  j  nl | j  cr  j  j  nl I  ENTER  TRANSACTION  TYPE  * 

T2210  | cr | | nl | YOU  PRESENTLY  DO  NOT  HAVE  A  CURRENT  FILE* 

T2211  | cr 1 1 nil  FILE  NAME?  * 

T2220  INCORRECT  CAT/FILE  DESCRIPTION* 

T2221  | cr | | nl| | nl | ERR-FILE  NAME  >8  CHARACTERS* 

T2222  | cr | | nl | ERR-FILE  NAME  >8  CHARACTERS* 

T2223  IS  NOT  A  LEGAL  INPUT  CHARACTER* 

T2224  IS  AN  ILLEGAL  INPUT  CHARACTER* 

T2225  TOO  LONG* 

T2230  | cr 1 1 nl| | nil | cr | | nil  INVALID  TRANSACTION  TYPE  -RETYPE- 

T2240  NOT  IN  CURR  FILE  * 

T2250  | cr 1 1 nil  ILLEGAL  PARAMETER 

T2260  FILE  PRESENTLY  BUSY* 

T2270  | cr I | nl | DATA  SAVED-* 

T2280  | cr 1 1 nil  I cr 1 1 nl| |dc3| |cr| |nl| ready |cr| | nl | “ 

T2281  | cr | |nl| ready |cr| |nl|" 

T2290  a|cr|* 

T2300  a  a|cr |“ 

T2310  aallcrl* 

T2320  d | cr I  * 

T2330  e|cr|“ 

T2340  h  |  cr | * 

T2350  j | cr |* 

T236Q  k  |  cr  |  “ 


V 


I 


H 

>K 

i 

t 

r 

& 


% 

% 

is 


T2370 

kal |cr|* 

T2380 

llcrl* 

T2390 

■i  cr*r 

T2400 

n|cr |“ 

T2410 

p|cr|" 

T2420 

r- llcrl' 

T2430 

r-2 |cr|" 

T2440 

rll  |cr|“ 

T2450 

r12|cr|" 

T2460 

aa4|cr |“ 

T2470 

ka2|cr|* 

T2480 

1 1  cr | “ 

T2490 

v|cr |" 

T2500 

x|cr|* 

T2510 

z  a|cr|* 

T2512 

jsblcr |“ 

T2514 

j  blcr|“ 

T2516 

n  a|cr|“ 

T2518 

n  b|cr|" 

T2519 

xxxlcr |“ 

T2520 

donelcrl 

T2540 

dele" 

T2541 

feed" 

T2542 

next" 

T2543 

nofe* 

A  -  66 


T2544  pass 
T2545  rewi 


,rt 

It 


T2546  skip* 

T2547  help* 

T2548  voca* 

T2550  remove  clearfi les|cr|* 
T2555  remov  clearfi les|cr|* 
T2560  remo  clearfi leslcrl* 
T2580  rese* 

T2600  retr* 

T2610  list |cr I “ 

T2611  list  * 

T2612  list  1 1  cr  |  “ 

T2613  listl  * 

T263U  resave  |  cr  I" 

T2631  resalcrl* 

T2632  resave  * 

T2633  resa  “ 

T2640  old|cr|* 

T2645  olcrl* 


•  1 


T289G 

T2891 

T2910 


tn|cr|“ 

tn* 

C* 


3 


*  i 


T2960  backward 


T2961  b“ 

T2980  get  * 

T2981  g  “ 

T30U0  test |cr |“ 

T3001  t |cr |“ 

T3010  *|crT 
T3011  system|cr|“ 

T3012  syst |cr  |  “ 

T3020  xmit|cr|“ 

T3021  x | cr | ‘ 

T3030  bye|cr |“ 

T3040  d|cr|* 

T3050  DATA  TRUNCATED  “ 

T3Q60  | cr | | nl | INVALID  COMMAND  AT  THIS  LEVEL  ‘ 

T3070  END  OF  TRANSACTION  IcrllnlT 
T3080  MORE - |cr||nU“ 

T3Q90  |cr||nL||nL||cr||nL| TRANSACTION  SENT.  NEXT?  * 

T3110  | cr | | nl| OLD  FILE?  * 

T3120  |  cr  |  |  nl|  INVALID  COMMAND  AT  THIS  LEVEL  |cr||nl|* 

H130  | cr | | nl| | nil | cr | | nil  INVALID  TRANSACTION  TYPE  -RETYPE- 

T3300  hd|cr|“ 

T3310  as  |cr  |“ 

T3320  am|cr|" 

T3330  avlcrl* 


T3400  pllcrl* 

T3410  pdlcrT 

T3420  ol | cr | “ 

T3430  odlcrT 

T2657  | cr 1 1 n  L | 

I cr | |nl|TNC000010 

T2658  TRANSACTION  SEQUENCE 

T2659  ERROR  MESSAGE | cr | | nl 

T2660  I cr | | nil 

I c  r 1 1 nl | TNC000010 
DATA 
llnll 

01  C - 

020 

030 

04CA 

05  C - 

060 

08  C - 

09  C - 

IOC - 

11 C- 
12C- 
13  C- 

14C - 

15CFS 
16C - 


TRANSACTION  SEQUENCE  NUMBER  |cr||nir 
NUMBER  | cr | | nil* 


TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

NAME  ERROR  MESSAGE |cr-> 

A-CARD-SEQ|cr| |nl| 

A-SECURITY-CL  j  cr | |nl| 
A-TRAN-TYPE|cr| |nl| 

A-CARO-TYPElcrl |nl| 

A-UIC | cr | |nl | 

A-UDCjcrj  jnl| 

-  A-aname | cr | | nil 

A-UTC|cr| | nil 
A-ULCjcrj | nil 
A-MJCOMl cr | | nl | 

A-MAJOR  j  cr  j | nl | 

A-REVAujcrj |nl| 

A-SCLAS | cr | | nl | 

A-ORGUIC | cr | |nl| 

A-RPTYP|cr| | nl| 

A~RPTNR  j  cr I |nl| |cr| |nl|" 


T2670  | cr | | nil 

I c  r | | nl | TNC000010 


TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 


DATA  NAME  ERROR  MESSAGE | cr | | nl | 

01  C -  A-A-CARD-SEQ  |  cr  |  |  nl  | 

02  C-  A-A-SECURITY-CL|cr| |nl| 

03  C-  A-A-TRAN-TYPE|cr| |nl| 

04CA  A  A-A-CARD-TYPE|cr| |nl| 

05  C -  A-A-UIC | cr 1 1 nil 

Q6C -  A-A-SRC |cr| |nli 

07  C -  TAPFOR-CODElcr  j  |nl| 

08C-  A-A-PACING|cr| |nl| 

09 C—  A-A-RDYCD | cr  1 1 nl | 

IOC-  A-A-TPSNCD | cr | | nl | 

11C -  A-A-SBRPT2|cr|  jnl  j 

12C -  A-A-R0BC01 1 cr 1 |  nl  | 

13 C-  A-A-MSYSACDlcrl |nl| 

14C -  A-A-ROBCOl cr | |nl| 

15C -  A-A-DAMPL | cr  j | nl | 

16C -  A-A-SEQKEY | cr j |nl| 

17C-  A-A-IFREO | cr | jnl| 

18C-  A-A-ARR | cr | | nl | 

19C —  A-A-ARGO | cr 1 1 nt  | 

20 C-  A-A-ARMY |cr | |nl| 

21 C -  A-A-ORGUICl cr | | nil 

22CFS  A-A-RPTYP|cr | |nl| 

23 C -  A-A-RPTNR| cr  j  j  nl j | cr 1 1 nl | “ 

T2680  Icrllnll 

I cr | | nl ITNCQOOOIO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

OATA  NAME  ERROR  MESSAGE | cr| j nl | 

01 C -  AA1-CAR0-SEQ I cr | | nl | 

02 C-  AA1-SECURITY-CL | cr | | nl | 

03 C-  AAl-TRAN-TYPE | cr I | nl | 

04CAA1  AA1 -CARD-TYPE | cr | | nl | 

U5C -  AAl-UIC|cr| |nl| 

06 C-  AAl-LIC|cr| |nl| 

U7C -  AA1-EDATE | cr | | nl | 

08C -  AA1-TPSN1 5 | cr | | nl | 

09 C—  AA1-TPSN-EL-SEQ |  cr  |  | nl  | 

IOC-  AA1-0ESTS | cr | | nl | 

11C—  AAl-STATC|cr|  |nl| 

12C-  AA1-FUAC | cr | |nl | 

13C —  AAl-ASGMT|cr| |nl| 

14C -  AAl-ZJP|cr| |nl| 

15C -  AA1-AP0 l cr | | nl | 

16C —  AAl-PPA|cr| |nl| 

17C -  AA1-MAC  j  cr  j | nl j 

18C -  AA1-PLGE0|cr| |nl| 

19C -  AA1-0RGUIC | cr j |nl| 

20CFS  AAl-RPTYPlcrl jnl| 

21 C -  AA1-RPTNR | cr | j  nlj | cr 1 1 nl | * 


T2690 


T2700 


T2710 


I  cr 1 1 nl 
Icr | j  nl 
DATA 

U1 C - 

U2C- 
03  C- 
04  CD 

05  C - 

06C- 

07C - 

08  C - 

09C - 

IOC - 

11C - 

12C-- 

13C- 

14C- 

15C- 

16C - 

17CFS 
18C - 


ITNC000010 

NAME 


0010  TRANSACTION  SEQUENCE  NUMBER 
NAME  ERROR  MESS A6E | cr | | nl| 
D-CARD-SEQ|cr| |nl| 

D-SECURITY-CL  j  cr | |nl| 


| cr | | nL | 


D-TRAN-TYPE 

D-CARD-TYPE 


D-UIC|cr| | n 1 1 


O-CSERV |cr | 
D-OPCON|cr| 
D-ADCON  j  cr  j 
D-HOGEO|cr| 
D-PRGEO) cr j 
D-EMBRKlcrj 
D-ACTIV |cr | 
D-DFCON | cr  j 
D-NUCIN  j  cr  j 
D-PCTEF|cr | 
D-ORGUIClcr 
D-RPTYP|cr  | 
D-RPTNR  cr 


cr | |nl| 
crj  j nL | 


nl| 

nil 

nil 

nil 

nil 

nil 

nil 

nil 

nil 

nil 

|nl| 

nil 

nlj | cr 1 1 nl | “ 


I cr | | nl | 

Icr | |nl|TNC000010 


DATA 

01  C - 

02  C- 
U3CE 

04  C - 

05CFS 
06  C - 


TRANSACTION  SEQUENCE  NUMBER 
ERROR  MESSAGE |cr | | nil 


I  cr |  |  nl | 


NAME  ERROR  ME 

E-CARD-SEQ | cr |  |nl| 
E-SECURITY-Cljcrl jnl| 
E-CARD-TYPE |cr | lnl) 
E-ORGUIC | cr |  |  nl  | 
E-RPTYP|cr | j nl| 

E-RPTNR  j  cr  j  |nl  j  |  crj  InlT 


T2720  Icr | | nil 


|  cr 1 1 nl 
Icr | |nl 
DATA 
U1 C001 
U2C- 
U3CH 
04  C — 

05  C — 

06  C — 
07CZ 

08C - 

09  C — 
IOC- 

11  c— — 
12CFS 
1 3  C - 


ITNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

NAME  ERROR  MESSAGE |cr | | nl| 

H-CARD-SEQ |cr | |nl| 

H-SECURITY-CL|cr| |nl| 

H-CARD-TYPE | cr| |nl| 

H-CARD-DAY |cr| |nl| 

H-C ARD-HR | c  r | j  n 1 1 
H-CARD-MIN | cr  j | nl | 

H-ZULU|cr|  | nil 
H-CARD-MONTH | cr | |nl| 

H-CARD-YEAR | cr | jnl| 

H-REAU-EXERCISElcrl |nl| 

H-ORGUIC|cr| | nlj 
H-RPTYP | cr | jnl  | 

H-RPTNR  j  cr | j  nl j | cr  1 1  nl  | " 


A  -  71 


B 


B 


If 


| 

f 


B 


,  \-i.  Vn  V*  ft 


ft 

ft 

ft 


FS! 


T2730 


I cr | | nil 

DATA 

01 C - 

02C- 
03C- 
04  CJ 

05  C - 

06C— 

U7C - 

U8C - 

09C - 

10C - 

11C— — 

12C - 

13C - 

HC- 

ISt; — 

16C - 

17CFS 
18C - 

I cr| |nl 
|cr| jnl 
DATA 


ITNC000010  TRANSACTION  SEQUENCE  NUMBER 

NAME  ERROR  MESSAGE | cr I | nil 

J-CARD-SEQ | cr | | nl | 

J-SECURITY-CLlcrl |nl| 

J-TRAN-TYPE | cr |  |nl| 

J-CARD-TYPE | cr | |nl| 
j-UIC|cr| |nl| 

J-TPERSl cr|  | nl  | 

J-PEGEOlcrl | nil 
J— STRUC | cr 1 1 nl  | 

J-AUTHlcrl jnl| 

J-ASGDlcrj jnl| 

J-POSTR | cr 1 1 nl| 

J -PICDA | cr  1 1  nl  | 

J-OEPS | cr 1 1  nl  | 

J-CASPW| cr  1 1 nil 
J-CCASP | cr  j  |  nl  | 

J-ORGUIC|cr|  | nil 
J-RPTYPlcr j  j nl| 

J-RPTNRlcrj  jnlj |cr| |nl|“ 


I  cr 1 1 nl | 


iTNeooooio 

NAME 


TRANSACTION  SEQUENCE  NUMBER 
ERROR  MESSAGE | cr | |nl| 


|  cr | | nl 1 


01  c - 

CARD-SEQ|cr| |nl| 

02C- 

SECURITY-CL.  | cr  |  |nl| 

03  C- 

TRAN-TYPE t cr  1 1  nil 

04  C - 

CARD-TYPE j  cr | |nl| 

05  C - 

UIC|cr | | nl 1 

Q6C- 

READY | cr | | nil 

07C- 

REASN  lcrj  jnl| 

08C- 

PRRAT  j  cr  j | nl | 

09C - 

PRREsjcrl jnl| 

10  C- 

ESRAT  j cr | { nl | 

ii  e — 

ESREsjcrl jnl| 

12C- 

ERRAT|crj | nl | 

i3e — 

ERRESj  cr | jnll 

HC- 

TRRAT | cr | j  nl | 

15C - 

TRRESj  cr 1 1 nl I 

16C - 

SECRN  j  cr  j  jnll 

17C - 

TERRN | cr | |nl| 

18C- 

CARAT |cr| |nl| 

19C - 

CADAT| cr J  jnl 1 

20C- 

LIM|cr| | nl 1 

21 C- 

RLIM|cr| | nil 

22C - 

R I  CD  A  |  c  r  1 1  n  1 1 

23  C - 

ORGUIClcrj | nl | 

24CFS 

RPTYP|cr| jnll 

25C - 

RPTNR  j  cr  j  jnll | cr 1 1 nl  |  “ 

A  -  72 


I cr I | nl | 

I cr | | nllTNCOOOQIO 


DATA 

NAME  ERROR 

01 C - 

CARD-SEQ|cr| |nl| 

02  C- 

SECURITY- CS | cr | | nl | 

03  C- 

TRANS-TYPE | cr | j nil 

04  C - 

CARO-TYPE  1 cr | |nl| 

05  C - 

UIC|cr| | nl | 

U6C - 

PSPER | cr | | nl | 

07  C— 

MSPERlcrj  jnlj 

08C — 

SGPER I cr | | nl | 

09  C — 

APERT | cr | | nil 

IOC— 

DEPSTlcrl | nil 

11C - 

EHRDN j  Cr  j jnlj 

12C - 

EHRD1 1 cr | jnlj 

13C - 

EHRD2 1 cr  j  jnlj 

14C - 

EHR03 I cr | | nl j 

15C - 

EHRD4 j  cr | j  nl | 

16C— 

PILFILlcrj | nl | 

17C — 

PERRY | cr | | nil 

18C — 

PI-ES I cr  j  j  nl j 

19C — 

ER  |  cr  j | nl j 

20  C — 

PI-ER | cr | j  nl | 

21  C- 

TWRC1 | cr | | nl | 

22  C- 

ITAVS | cr | | nl | 

23  C- 

ITBMM | Cr  j jnlj 

24  C- 

ITAFTlcrlinll 

25  C- 

ITAEMlcrl i nl I 

26  C- 

ITAQL | cr | | nl | 

27C- 

ITATF | cr | [nil 

28C- 

ITAFL I Cr | | nl | 

29C- 

ITATA | cr | | nl | 

3QC- 

ITATM| cr | | nl | 

31 C- 

READ2 | cr 1 | nl | 

32  C- 

ALO|cr| | nl | 

33C - 

RICD1 I cr | | nl | 

34  C- 

PUID | cr | j  nl | 

35  C - 

ORGUIC | cr 1 | nl | 

36CFS 

RPTYP|cr| 1  nil 

37C - 

RPTNRjcr j  jnlj |cr| |nl 

1  cr 1 1 nil 

lcr| | nllTNCOOOQIO  TRANSACTIOl 

QATA 

NAME 

01  c - 

L-CARD-SEQ | cr 

02  C- 

l-SECURITY-Cl 

03  C- 

l -TRAN-TYPE  |  C 

04CL 

l-CARD-TYPE  j  c 

use - 

l-UIC|cr|  1  nl  1 

06C - 

-  L-MEQPT | cr 1 1  n 

TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 
ERROR  MESSAGE  I cr I  I  nil 


ERROR  MESSAGE | cr | | nl 


37C - 

L-M£PSA|cr| |nl| 

08  C - 

L-MEPSD 1 cr 1 1 nl  | 

09  C - 

L-MEORD I cr 1 1 nL  I 

IOC - 

L-MEORN  j  c r  j  jnlj 

11C - 

L-MEREC  j  crj jnlj 

12C - 

L-ORGUIC|cr| |nl| 

13CFS 

L-RPTYP | cr | | nl  | 

14C - 

L-RPTNR | cr 1 1 nl 1 1 cr 1 1  nl  |  * 

I cr | | nl| 

|  cr 1 1 nil TNC00001Q 
DATA 

01  C - 

020 
030 
04  CM 

U5C - 

06  C - 

07C - 

08  C - 

09  C - 

IOC - 

nc - 

12C - 

13CFS 
14C - 

Icr | (nil 

I  cr  |  |  nl ITNCOOOOIO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 


DATA  NAME  ERROR  MESSAGE | cr | | nil 

01  C -  N-CARD-SEQ|cr| |nl| 

02 C-  N-SECURITY-CL|cr| |nl| 

03 C-  N-TR AN-TYPE | c  r | | n  L | 

04CN  N-CARD-TYPE I crj | nl j 

U5C -  N-UIC | cr 1 1 nl | 

06C -  N-PIN j crj  j nl j 

07C -  N-FRN  j  cr  j  j  nl j 

080  N-PLEAC  J  cr  j  I  nl  | 

09C—  N-DDPlcr|  | nil 

IOC -  N-DDPRD | cr | |nl| 

11C -  N-MDT|cr | 1 nl| 

12  C -  N-PUTCVlcrl |nl| 

13C -  N-ORGUIC | cr 1 1  nl  | 

14CFS  N-RPTYPlcr! jnl| 

15C -  N-RPTNR  jcr| |nl  | |cr| |nl|“ 

Icr | | nL| 

Icr | | nl|TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr j | nl | 

QIC -  P-CARD-SEQ | cr | | nl | 


TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 
NAME  ERROR  MESSAGE | cr | | nl j 

M-CARD-SEQ | cr | | nl | 

M-SECURITY-CL  j  cr | |nl| 

M-TRAN-TYPEl cr | | nl | 

M-CARD-TYPE | cr | | nl | 

M-UIC|cr| | nl | 

M-MEQPT | cr | |nt| 

M-TEGEojcrl j  nl | 

M-MEPSojerj | nl j 
M-MEORD|cr| |nlj 
M-MEORNl crj j nlj 
M-MEREC  j  cr I | nl j 
M-ORGUIC | cr  j | nl | 

M-RPTYPlcrl j nl| 

M-RPTNR | cr  j jnlj | cr  I  |nl|“ 


s 


02 C-  P-SECURITY-CL |  cr | | nl | 

03  C-  P-TRAN-TYPE | cr | | nl | 

Q4CP  P-CARD-TYPE | c  r | | nl j 

USC -  P-UIC | cr 1 1 nl 1 

06  C -  P-PIN  j  cr  j  j  nl | 

07  C -  P-PEQPT | c  r 1 (nil 

U8C -  P-TPGEOlcrl jnlj 

U9C —  P-ALTYPlcrl jnl| 

IOC -  P-NUMRR | cr  j  jnlj 

11C -  P-NUMEA | cr  j  j  nl  j 

1 2  C -  P-ALRET | cr 1 1 nl  | 

13C -  P-ORGUIClcrj |nl| 

14CFS  P-RPTYPlcrj jnl| 

15C -  P-RPTNR| cr||nlj|cr||nl|“ 

T2790  | cr | | nil 

|cr  |  jnllTNCOOOOlO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE |c-> 

f  I  I  nl  j 

U1C -  R-1-CARD-SEQ|cr| |nl| 

02 C-  R-1-SECURITY-CL | cr I |nl| 

03 C-  R-1 -TRAN-TYPE | cr | |nl| 

U4C -  R-1-CARD-TYPE|cr| jnlj 

05  C -  R —1  — UI C | cr | | nl | 

06 Cl  R-1-RMK-SEQ-NUM|cr| |nl| 

07 C-  R-1 -NUM-OF-CARDS | cr I |nl| 

08  C -  R-1-RMH-LABEL|cr||nl| 

09 C -  R-1-SEC-C0NTR0L | cr I  I nl | 

IOC -  R-1 -RMK-DATE | cr | | nl | 

11C -  R-1-RMAE | cr | | nl j 

1 2 C - - -  R-1-RMK-NARRATIVE  |  cr  |  |  nl  | 

1 3  C -  R-1-0RGUIC | cr | |nl| 

14CFS  R-1-RPTYP|cr | |nl| 

15C -  R-1-RPTNR  j  cr | jnlj |cr| |nl|" 


T2800  |cr | | nil 

| cr I jnllTNCOOOOlO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  -> 


riiitf  1 1  Cdjc^A'JI 


EQ-NUM | cr | | nl | 

07  C-  R-2-NUM-0-> 

F-RMKS | cr | | nl | 

08  C -  R-2-RMK-N-> 

ARRATIVE | cr | | nl | 

09 C -  R-2-0RGUI-> 

C  |  cr 1 1 n  L | 

10CFS  R-2-RPTYP-> 

Icr 1 1 n  L | 

11C -  R-2-RPTNR-> 

Icr | | nl | | cr | | nl | “ 


| cr 1 1  nL  | 

|cr | |nl|TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 


OATA 

ERROR  MESSAGE |cr | | nl| 

01  C - 

nil 
02  C- 
r| | nl | 

03  C- 
|nl  | 

04  C - 

InLl 

05  C - 

U6C1 

rllnLl 

070 

rllnll 

U8C - 

InLl 

Q9C - 

nil 

10[ - 

r||nL| 

11C - 

I 

12CFS 

13C - 

I  cr  |  |  HU¬ 


MANE  -> 

R-11-CARD-SEQ I cr | |-> 

R-11-SECURITT-CL|c-> 

R-11 -TRAN-TYPE | cr|-> 

R-11 -CARD-TYPE |cr | -> 

R-1 1-UIC | cr | |nL| 

R-1 1 -RMK-SEQ-NUM | C-> 

R-11 -NUM-0 F-RMKS | C-> 

R-1 1-RMK- LABEL | cr |-> 

R-11-RMK-DATE |cr | |-> 

R-1 1-RMK-NARRITI | C-> 

R-11 -ORGUIC | cr | |nl-> 

R-11 -RPTYP | cr | | nl| 
R-11 -RPTNR | cr I | nl j -> 


i 


A 


f 

l 


4 

? 


| cr | | nl | 

Icr | |nl|TNC000010  TRANSACTION  SEQUENCE  NUMBER 

DATA 

ERROR  MESSAGE [cr | |nl| 

U1  C - 

-SEQ | cr | | nl  | 

U2C- 

KITY-CL | cr | |nl| 

U3C- 


cr  |  |nL| 


NAME 


-> 


R-12-CARD->  * 

7 


R-1 2-SECJ-> 


R-12-TRAN-> 


-TYPE | cr | | nil 
(J4C - 

-TYPE | cr | | nil 

05  C - 

crl | nil 
06  C- 

SEQ  |  cr  1 1  n L  | 

07  C- 

RMKS|cr| | nl| 

08C - 

NARRIT | cr | | nl | 

U9C - 

1C | cr | | nl | 

10CFS 
P|crl l nl | 

11  C - 

R|cr | | nl | | cr | |nl|“ 


R-12-CARD-> 


R-12-UIC |-> 


R-12-RMK-- > 


R-12-NUM— > 


R-1 2-RMK — > 


R-12-0RGU-> 


R-12-RPTY-> 


R-12-RPTN-> 


I cr 1 1  nl  | 

I  c  r | | nl | TNC000010 

DATA 

01  C - 

02  C- 
03  C- 
04CAA4 

05  C - 

06  C — 

07  C - 

08  C — 

09  C - 

IOC- 

II  C— 

12  C - 

13C - 

14C - 

15CW0Z0FF 
16CFS 
17C - 


TRANSACTION  SEQOENCE  NUMBER  |cr||nl| 
:  ERROR  MESSAGE | cr | 1 nl | 

-SEQ | cr | | nl | 

-SECURITY-CL | cr | |nl| 

-TRANS-TYPE | cr| | nil 
-CARO-TYPE | cr| j nil 
-UIC-CONTROLlcrl |nl| 


-ASGMT|cr| | nl| 

-TPSN15 1 cr | { nL  | 
-TPSN-EL-SEQ | cr | | nl | 

-SRC | cr | (nil 
-OESTS|crl | nl| 

-STATCl cr | |nl| 

-MAC|cr| | nl  | 

-POADlcrj |nlj 
-PIOO j  cr | jnl j 
-ORGUIC | cr  J | nl| 
-RPTYP|cr| | nl| 
-RPTNBRlcrj | nl 1 1 cr 1 1 nl | ' 


I  cr 1 1 nl | 

I  c  r | | nl |TNC000010 
DATA  NAME 


QIC - 

U2C- 

U3C- 

04CKA2 

U5C - 

06  C - 

07C - 

08C - 


10010  TRANSACTION  SEQOENCE  NUMBER  |cr||nl| 

NAME  ERROR  MESSAGE | cr| | nl| 

CARD-SEQ |cr | |nl| 

SECURITY-CL  j  cr | |nl| 

TRAN-TYPE | cr| | nl| 

CARD-TYPE | crj |nl| 

UIC|cr | |nl| 

PEOHN | cr | | nl | 

PEOHl | cr | | nl | 

PE0H2 | cr I | nl | 


m 


J 

jwv 


ml 

m 


r>Vri  * 


m 


m 

m 


iW 

SI 


t 

h 

m 


'»W 

i 

sa 


m 


;**; 

»!S% 

w 


$ 

If 

'A 


T2850 


T2860 


Q9C - 

IOC - 

11C— 

12C — 

13C — 

14C — 

15C — 

16C - 

17C - 

18CFS 
19C - 


PE0H3 | cr 
PE0H4|cr 
PIEOH  j  cp 
POHRRlcr 
POHPljcr 
POMERlcr 
PRZERjcr 
RICD2 | cr 
0R6UIC | c 
RPTYP | cr 
RPTNRlcr 


I cr | |nl| 

I  cr 1 1 nl|TNC000010 


nil 

nil 

nil 

nil 

nil 

nil 

nil 

nil 

imi 

nil 

nlj | cr 1 1 nil  ‘ 


TRANSACTION  SEQUENCE  NUMBER 


DATA 

NAME 

ERROR 

01  c — 

T-CARD-SEQ | cr | | nl | 

02  C- 

T-SECURITY- 

CL | cr | | nl 

03  C- 

T-TRAN-TYPE 

I  cr 1 1 nl | 

04CT 

T-CARD-TYPE 

1 cr | | nl 1 

05  C - 

T-UIC|cr| | nl  | 

U6C - 

T -TEQPT | c  r | 

I  nl  | 

07C - 

T-M£SEN|cr| 

I  nl  1 

08C- 

T-OECON| CP | 

I  nl  | 

09  C — 

T-MECUS j  cr | 

I  n  1 1 

IOC- 

T-AVCAT|cr| 

I  nl  | 

11C- 

T-RESN0jcri 

|nl| 

12C - 

T-ERDTEl  cr  | 

I  nl  | 

13C- 

T-EXDAC|cr  l 

1  nil 

14C— — 

T-CPGEoj  cr  | 

1  nl  | 

15C - 

T-CFGEOlcrj 

|  nl  | 

16c - 

T-EQOEPlcri 

|  nl  | 

17C - 

T-EQARR | C  r | 

j  nl  | 

18C - 

T-TPIN|cr| j 

nil 

19C- 

T-TLEAC | cr  | 

I  n  1 1 

20  C — 

T-TLEQE | crj 

|  nl  | 

21 C - 

T-ORGUIClcr 

llnll 

22CFS 

T-RPTYP|cr | 

I  nl  | 

23C - 

T-RPTNR | cr  | 

j  nl | | cr 1 1 nl 

1 cr | | nl | 

I c  r 1 1 nl ITNCOOOOIO 

TRANSACTION  SEQUE 

DATA 

01  C - 

02C- 
03  C- 
U4CV 

05  C - 

06  C— 
U7C — 

08  C - 


NAME  ERROR  MESSA6E|cr| |nl| 

V-CARD-SEQlcrl |nl| 

V-SECURITY-CL|cr| |nl| 

V-TR AN-TYPE | cr |  |nl| 

V-CARD-TYPE  j  cr  j j  nl j 
V-UIC | cr | loll 
V-ACGEO|cr|  |  nl| 

V-ACITY 1 cr 1 1 nl  | 

V-AOATE | cr  j  j  nl j 


I 


S' 

K 


it 


*  JL»  j 

|C«*. 


A  -  78 


09C -  V-MOATElcrl  |nl| 

IOC -  V-ROATElcrl |nl| 

11 C -  V-ORSUIClcrj |nl| 

12CFS  V-RPTYP | cr | | nL | 

13C -  V-RPTNR|cr| |nl| |cr| |nl|* 

T2870  I cr | | nil 

| cr I |nl|TNCQ00010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | | nl | 

U1C -  X-CARD-SEQlcrl |nl| 

02 C-  X-SECURITY-CLlcrl |nl| 

03CC  X-TRAN-TYPE | cr | | nl | 

U4CX  X-CARD-TYPE|cr| jnlj 

05 C -  X-UICl cr | |nl| 

06  C -  X-GCMD | cr 1 1 nl | 

07C -  X-TOATE | cr | | nl | 

U8C -  X-TRGEO  j  cr  j | nl | 

U9C -  X-DEPDT|cr| |nlj 

IOC -  X-ARRDT  j  cr  j | nl | 

11C -  X-RPTOR|cr| |nl| 

12C -  X-INTRST1 | cr | |nl| 

13C -  X-INTRST2 | cr | |nl| 

14C -  X-S8RPT|cr | | nl| 

15 C -  X-ATACH|cr| |nl| 

16C -  X-ORGUIC | cr I | nl | 

17CFS  X-RPTYP | cr | j  nl | 

18C -  X-RPTNR | cr 1 1 nl | | cr 1 I  nl  |  “ 

T2880  I cr | | nil 

| c r 1 1 n L | TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

OATA  NAME  ER-> 

ROR  MESSAGE | cr | | nl| 

01 C -  Z-A-CARD-SEQ I cr I | nl | 

02 C-  Z-A-SECURITY-CL|cr| j  nl-> 


03  C 

04CZ  A 

05  C - 

06  C - 

u 

07C- 

08  C - 

09C - 


IOC - 

nl| 

11  C - 

12CFS 

13C - 

nil* 


Z-A-TRAN-TYPE | cr  |  |nl| 
Z-A-CARD-TYPE|cr | jnl| 
Z-A-UIC | cr 1 1 nl  | 
Z-A-CARD-TYPE-IN | cr | |  n-> 

Z-A-TRANS-COOE | cr | | nl | 
Z-A-ERROR-CODE|cr| |nl| 
Z-A-CARO-NUMBER|cr| |nl-> 

Z-A-REPORT-NUMBER | cr | | -> 

Z-A-ORGUIC | cr 1 1  nl  | 
Z-A-RPTYPlcrl j nil 
Z“A-RPTNR  j  cr  j j nlj |cr| |-> 


I cr I | nl | 

I cr | | nl | TNC000010  TRANSACTION  SEQUENCE  NUMBER  icr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | |nl | 

01 C -  J-B-CARO-SEQ | cr | | nl | 

02  C-  J-B-SECURITY-CL|cr| |nl| 

03  C-  J-B-TRAN-TYPE | cr | | nl| 

04 CJ  B  J-B-CARD-TYPE | cr | | nl | 

U5C -  J-B-UIC | cr | | nl | 

06C-  J-B-COMPO|cr| | nil 

07  C -  J-B-EOATE| crj jnlj 

Q8C -  J-B-STRUCOlcrj |nl| 

U9C -  J-B-STRUCwjcri jnlj 

IOC -  J-B-STRUCE|cr| |nl| 

11C -  J-B-AUTHO | cr | |nl| 

12C -  J-8-AUTHW|cr| |nlj 

13C -  J-B-AUTHE | cr | | nl| 

14C -  J-B-ORQUICj cr 1 |nL| 

15CFS  J-B-RPTYP  Jer | | nl | 

16C -  J-B-RPTNR| crj  j nlj |cr| |nl|* 

I cr  |  |nl| 

I c r 1 1 nl | TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE |cr| |nl| 

01 C -  CARO-SEQ | cr | | nl | 

02 C-  SECURITY-CSjcrl |nl| 

03 C-  TRANS-TYPE | cr | |nl| 

04CJ  B  CARD-TYPE | cr | Inll 

05 C -  UIC|cr| |nl| 

06C -  STRUCOlcrl |nl| 

07C -  STRUCWlcrl |nl| 

08C -  STRUCE | cr | | nl | 

09  C -  AUTHO|cr| jnll 

IOC -  AUTHwjcrj jnll 

11C -  AUTHEjcrj jnlj 

12 C -  DAMPL|cr| |nl| 

1 3  C -  ROBCOjer j jnll 

14C -  ORGUIClcrj |nl| 

15CFS  RPTYP|cr| jnl| 

16C -  RPTNR|cr| |nl| |cr| |nl|“ 


l cr l | nl | 

I cr | |nl| TNC000010  TRANSACTION  SEQOENCE  NUMBER  |cr||nl| 
DATA  NAME  ERROR  MESSAGE | cr | | nl | 

01 C -  N-A-CARD-SEQlcrl |nl| 

02 C-  N-A-SECURITY-CL.jcr|  jnll 

03 C-  N-A-TRAN-TYPE | cr | | nl | 

04CN  A  N-A-CARD-TYPE  j  c r | jnlj 

05 C -  N-A-UIC | cr | |nl| 

06 C -  N-A-DISTR|cr| |nl| 

07 C -  N-A-ORGUIC | crj | nl | 


08CFS  N”A-RPTYP|cr| |nl| 

Q9C -  N-A-RPTNR|cr| |nlj |cr| |nl|“ 

T3170  Icrllnll 

IcrlinllTNCOOOOlO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | | nl| 

01  C -  N-B-CARD-SEQ|cr| |nl| 

02 C-  N-B-SECURITY-CL jcrllnll 

U3C-  N-B-TRAN-TYPE|cr| |nl| 

U4CN  B  N-B-CARD-TYPEjcrj inlj 

05C -  N-B-UIC|cr| |nl| 

U6C -  N-8-PlN|cr| | nl| 

07 C -  N-B-FRNjcrj jnlj 

08C-  N-8-RPTDESl cr | | nl | 

U9C-  N-B-PLEAC | cr | | nl | 

IOC -  N-B-RTMl cr | | nl | 

11C -  N-B-RSNLA | c  r | 1 n 1 1 

12C -  N-B-PUTCvjcrj |nlj 

13 C -  n-B-POEGEO | c  r  j | n 1 1 

14C -  N-B-PODGEojcrl Inlj 

15C -  N-B-MODE | cr | | nl | 

16C -  N-B-LAD | cr | | nl | 

17C -  N-B-RTMDIR j cr | |nl| 

18C-  N-B-GCMDCODE|cr| |nl| 

19C -  N-B-QRGUIC | cr | | nl | 

20CFS  N-B-RPTYP|cr| |nl| 

21 C -  N“B-RPTNR | c  r | jnl| |cr| |nl|" 


T3440 


T3450 


T3460 


20C -  KAI-EHRDNl cr | |nl| 

21 C -  KA1-EHRD1 jcrj |nlj 

22  C -  KA1-EHRD2  jcr | | nl | 

23 C -  KAl-EHRD3|cr| |nl| 

24C—  KA1-EHRD4  J cr  j  |nl| 

25C -  KA1-0RGUIC | cr  |  |nl| 

26CFS  KAl-RPTYP|cr| |nl| 

27C -  KA1-RPTNR | cr  j | nl j | cr 1 1 nl | “ 

I cr | | nL | 

| c r | | nl ITNCOOOOIO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE |cr| 

U 

OICHD  DEMSTAT-HEADER|cr| |nl| 

02  C -  ORGUIC|cr| |nl| 

03  C -  RPTNR| cr | | nl | 

04  C~  DATE  |  cr  1 1 n L  | 

05 C -  TIME jcr | | nil 

06C -  MONTH | cr j | nl| 

07C—  YEAR  |  cr  1 1  nl| 

08  C -  PIN | cr | j  nL  | 

09 C -  EXERC-OP-NAME | cr | | nl |  |cr|  |nl|* 

I cr | 1 nl | 

| cr | | nl ITNCOOOOIO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | | nl | 

01  CAS  SHORT -TONS | cr | |nl| 

02C -  TRANSNUM|cr| |nl| 

03  C -  PIN | cr 1 1 nil 

04 C - -  ULN | cr | j  nl j 

05C -  uiC|cr | | nl | 

06  C -  STONBU |cr | jnl| 

07  C -  STONOVS | cr j |nl| 

081 -  STONOTsjcrl jnll 

09C -  STONNAT  j  cr  j  j  nl j | cr 1 1 nl | ~ 

I cr | | nl | 

I cr | | nl ITNCOOOOIO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr I | nl | 

01  CAM  MEASUREMENT -TONS | cr | | nl | 

02  C -  TRANSNUN | cr | |nl| 

03C -  PIN|cr||nl| 

04 C -  ULN| cr | j  nl j 

U5C -  UIC|cr|jnlj 

06C -  MTONBU  j  cr | jnl| 

07  C -  MTONOVS |cr  j | nl | 

08 C -  MTONOTS | cr  j | nl j 

09 C -  MTONNAT  j  cr | | nl 1 1 cr | | nl | “ 


T3470  | cr | | nil 


s 


T3480 


T3490 


T350Q 


T3510 


|cr||nl|TNC000010 


TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 


DATA 
U1  CAV 

U2C - 

U3C - 

U4C - 

05  C - 

06C - 

U7C - 

U8C - 

09  C - 


NAME  ERROR 

VEHICLE-PAX | cr | | nl| 
TRANSNUM) cr | | nil 
PIN|cr| |nl| 

ULN j  crj jnl  | 

Uicjcrj  jnlj 
STONVEH | crj | nl  | 
MTONVEH  j  cr I jnlj 
SQFTUNVEH |cr|  |nl| 
PAX|cr| |nl| |cr|  |nl  | 


ERROR  MESSAGE  |  cr  | 


I cr | | nl | 

I c  r | | nl | TNC000010 
DATA  NAM 

01  CAE  VAL 

02  C -  TRA 

03  C -  PIN 

04  C -  ULN 

U5C -  UIC 

06C-  RTM 

07C -  RTM 

U8C -  RSN 


1010  TRANSACTION  SEQUENCE  NUMBER 

NAME  ERROR  MESSAGE | cr | | nl| 

VALIDATION | cr | |nl| 

TRANSNUM | cr I |nl| 


I  cr 1 1 nl | 


PIN|cr| | nl| 

ULN j crj j nlj 
UIC i cr i | nl J 
RTM  j  cr  j jnlj 
RTMEST  j  cr | j  nl | 

RSNLA|cr | |nl| |cr| |nl|* 


I cr | | nl | 

| cr | | nl|TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr| 

DATA  NAME  ERROR  MESSAGE | cr | | nl | 

01  CAT  TOA-PICKUP|cr| |nl| 

02C -  TRANSNUM | cr | | nil 

03  C -  PlNjcrllnll 

04C -  ULN | crj jnlj 

05  C -  UIC  |  cr | | nl | 

06 C -  RTMTQAj  cr ||nl||cr||nl|" 


l cr 1 1 n  L | 

I c  r | | nl | TNC000010 
DATA 
01CED 

02  C - 

03  C - 

U4C - 

05  C - 

06  C - 


l  TRANSACTION  SEQUENCE  NUMBER 

NAME  ERROR  MESSAGE | cr | | 

EMPLOY-DEPART | cr | | nl| 

TRANSNUM | cr | | nt| 

PIN|cr| |nl| 

ULN  j  cr  j jnlj 
Uicjcrj  jnlj 
EMDDlcrj | nl 1 |cr| |nl|“ 


I cr I  I nl | 


I cr | | nl l 

|cr | | nl ITNCOOQOIO 


DATA 

01CEA 

U2C - 

03  C - 


TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 
NAME  ERROR  MESSAGE | cr | | nl| 

EMPLOY-ARRIVE | cr | | nl | 

TRANSNUM | cr | |nl| 

PlNlcr j |nl| 
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04  C - 

05  C - 

06  C - 


ULN|cr| | nl| 

UlClcrl | n  L | 

EMAD Icr I InLl Icr I |nl| 


T3520  |cr | | nil 

Icr | | nl |TNC000010  TRANSACTION  SEQUENCE  NUM8ER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | | nl| 

01 CMA  ARRIVE-M08STATI0N | cr | | nl | 

02  C -  TRANSNUM | cr | | nl | 

03  C -  UlClcrl | nl| 

U4C -  OTAMS|cr| |nl| 

05  C —  PPA|cr| |nl| |cr| |nl|" 

T3530  |cr | | nil 

Icr | jnl|TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | | nl | 

01  CMC  CHANGE-MOB-OATA|cr| |nl| 

02 C -  TRANSNUM |cr | | nil 

03 C -  UlClcrl 1  nil 

04C -  MUATE|cr| |nl| 

05 C -  MBODojcrj jnlj 

U6C -  MBSAO | cr | | nl| 

07  C -  ACGEO|cr| jnl| 

U8C—  MBCMDlcrl  jnll  |cr|  Inll* 

T3540  |cr | | nil 

| cr | | nl | TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr I | nl | 

01 CPL  POE-LAST-DEPART | cr | | nl | 

02 C -  TRANSNUM) cr | |nlj 

030, -  PIN] cr |  |nl | 

U4C -  ULNlcrj jnlj 

Q5C -  UlClcrl |nl| 

06 C -  POELDEPART | cr | |nl| |cr| |nl|* 

T3550  | cr | | nl | 

Icr j jnllTNCOOOOlO  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr I j nl | 

01CPD  POE-DEPART | cr | | nl | 

02 C -  TRANSNUM|cr| |nl| 

03 C -  PIN | cr | |nl| 

04C -  ULN|cr||nl| 

05  C -  UlClcrl jnll 

06 C -  POEDEPARTl cr | |nl| 

07 C -  POECARRIER|crj |nl| |cr| |nl|* 

T3560  |cr | |nl| 

1 cr i inl|TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE | cr | | nl | 

01  COL  ORIGIN-LAST-DEPRT | cr | | nl | 
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J1. 


02C -  TRANSNUM|crl |nl| 

U3C -  PIN | cr | | nL | 

U4C -  ULN|cr | j nlj 

USC -  UlClcrjjnll 

l)6C -  0RLDEPART|cr| |nl| |cr| |nl|" 

T3570  | cr | | nL | 

) cr I jnl|TNC000010  TRANSACTION  SEQUENCE  NUMBER  |cr||nl| 

DATA  NAME  ERROR  MESSAGE| cr| |nl| 

01  COD  ORIGIN-DEPART | cr | |nl| 

Q2C -  TRANSNUM|cr| |nl| 

03C -  PIN| cr I | n  L | 

04 C -  ULN|crj  jnlj 

USC -  UIC|cr| (nil 

U6C -  ORDEPART 1 cr | | nL | 

U7C -  OR CARRIER | cr  | f  n  L | | cr | |  nl  |  “ 


T6000  | nl | | cr | SIOS  ROUTINE | nl| | cr| ‘ 

T6010  |nl||cr|“ 

T6020  | nl ||cr | WHAT  FUNCTION  DO  YOU  WANT  | nl | | cr I | nl | | cr | 

MOVE,  RETURN,  CLEAR,  SEARCH  |nl||cr|* 

T6030  m“ 

T6031  c | cr | * 

T6032  cl" 

T6033  s" 

T6034  r" 

T6035  |cr|" 

T6100  | nl | | cr ISIOS  MOVE  ROUTINE  I nl | | cr | | nl | | cr | 

YOUR  FILE  YOU  WANT  TO  USE  lnl|Icr|" 

T6110  “ 

T6120  | nil | cr | SYSTEM  ID  YOU  WANT  TO  USE  | nl | | cr | “ 

T6121  I  nl  Her  |  YOUR  FILE  IS  BUSY  |nl  1 1  cr  I " 

T6122  | nil | cr | UNABLE  TO  ACCESS  YOUR  FILE | nl | | cr | “ 

T6140  | nl | | cr IWUFI  FILE  YOU  WANT  TO  USE  | nl | | cr ( “ 

T6141  |  nl  |  |  crlSYSTEM  ID  IS  NOT  AUTHORIZED  InlHcrl* 


T6160  | nl | | cr |OATA  WAS  MOVED|nl| |cr| * 

T6161  |nl| |cr|SYSTEM  10  IS  INVALID  ON  WUFI | nl | | cr | “ 

T6170  RECORDS | nl | | cr | * 

T6200  | nL| | cr ISIOS  RETURN  ROUTINE  | nil | cr | | nil | cr | 

YOUR  FILE  YOU  WANT  TO  USE  | nL| | cr | “ 

T6260  |nl|  I  crlRECORDS  WERE  RETURNED  |  nl  |  |  cr |  ** 

T6261  | nl | | cr |N0  DATA  FOR  THIS  SYSTEM  ID  | nl | | cr | | nl | | cr | 

RECORDS  WERE  NOT  RETURNED  |nl||cr|“ 

T6280  | nl ||cr | WUFI  RECORDS  WERE  CLEARED  |nl||cr|* 

T63Q0  | nil | cr | SIOS  CLEAR  ROUTINE  | nl | | cr 1 1 nl | | cr | 

SYSTEM  ID  YOU  WANT  TO  USE  |nljjcr|“ 

T6340  | nl | | cr | NO  DATA  TO  CLEAR | nl| | cr | “ 

T6400  | nil | cr | SIOS  SEARCH  ROUTINE  | nl | | cr | | nl | | cr | 

SYSTEM  ID  YOU  WANT  TO  USE  | nl | | cr | “ 

T6440  BLOCKS  OF  DATA  |nl| |cr|“ 

T6441  | nl | | cr |N0  RECORDS  FOUND | nl | | cr | “ 

T7000  ready | cr | | nil* 

T7001  | cr | | nil  Illegal  character" 

T7002  1 cr | | nl | <52>CURR£NT  FILE  NOT  DEFINEDl cr| | nl |" 

T9030  | cr | |nl|*“ 

T904Q  run  mc76/exercise/equip|cr|" 

T9050  runs  mc76/exercise/equip|cr I “ 

T906Q  runj  mc76/exercise/equip| cr | " 

T907Q  run  mc76/exercise/rptmoblcr|* 

T9075  runs  mc76/exercise/rptmob| cr| “ 

T908Q  runj  mc76/exercise/rptmob| cr I “ 

T9090  run  mc76/exercise/accimob| cr | * 


T9100  runs  mc76/exercise/accimob| cr 

T9110  runj  mc76/exercise/accimob|cr(“ 

T9120  run  mc76/exercise/info| cr I  * 

T9130  runs  mc76/exercise/info| cr | “ 

T9140  runj  mc76/exercise/info| cr | * 

T9150  run  mc76/exercise/strength|cr| * 

T916Q  runs  mc76/exercise/strength|cr|“ 

T9170  runj  mc76/exercise/strength|cr|“ 

T9180  run  me 76/exercise/ready | cr| * 
T9190  runs  mc76/exercise/ready|cr|* 

T9200  runj  me 76/exercise/ready |cr I" 

T9210  run  mc76/exercise/pomcus|cr|“ 

T9220  runs  mc76/exercise/pomcus I cr | * 

T9230  runj  mc76/exercise/pomcus I cr | * 

T9240  run  mc76/exercise/deployrp|cr |" 

T9250  runs  mc76/exercise/deployrp |cr | “ 

T9260  runj  mc76/exercise/deployrp|cr 

T927Q  run  mc76/exercise/dpLoyhpa|cr |“ 

T9280  runs  mc76/exercise/dployhpa|cr| “ 

T9290  runj  mc76/exercise/dployhpa|crr 

T9300  run  mc76/exercise/cinc|cr I “ 

T9310  runs  mc76/exercise/cinc| cr |* 

T932Q  runj  mc76/exercise/cinc|cr|* 

T9325 

T9330  run  mc76/exercise/exdeploy |cr(“ 
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r9340  runs  me  76/exercise/exdeploy  |cr|* 


r9350  runj  mc76/exercise/exdeploy |cr |“ 


r9360  run  mc76/exercise/trans|cr | * 


T9370  runs  mc76/exercise/trans|cr |“ 


T9380  runj  mc76/exercise/trans |cr | 


T9390  run  mc76/exercise/rptor J cr | “ 


T9400  runs  mc76/exercise/rptor|cr | 


T9410  runj  mc76/exercise/rptor|cr|“ 


T9420  run  mc76/exercise/mbcoistl|cr|* 


T9430  runs  mc76/exercise/mbcoistl|cr | 


T9440  runj  mc76/exercise/mbcoi st l | cr | “ 


T9500 


T9501 


T9520  ENTER  REQUIRED  PARAMETER  FOR  'OMNI “CAT FILE ' | cr | | nl | =* 


T9521 


T953Q 


T9531 


T9540 


T9550 


T9560 


T9580 


T9590 


T9600 


»'**’•*' 


nil  . * 


nL| ENTER  REQUIRED  PARAMETER  FOR  'OMNI “CAT FILE • | c r I |nl | =* 


nl| ENTER  REQUIRED  PARAMETER  FOR  ,WHERE“FLDNAME="LITERAL'"  |cr| |nl-> 


nl | ENTER  REQUIRED  PARAMETER  FOR  ,WHERE“FIELDNAME=mLITERAL,m  | cr | 


nil  ENTER  REQUIRED  PARAMETER  FOR  ’SORT-KEYl ' Icrl |nl|=* 


nl | ENTER  REQUIRED  PARAMETER  FOR  'SORT-KEY2 ' | cr I | nl | 


nl| ENTER  REQUIRED  PARAMETER  FOR  'OUTPUT-CAT FILE ' | cr 1 1 nl | =' 


T9570  ENTER  REQUIRED  PARAMETER  FOR  "'SBRPT'"  | cr I | nl |=“ 


nl | ENTER  REQUIRED  PARAMETER  FOR  'SORT-FLDl-OR-BLANKS' | cr | | nl |=* 


nl | ENTER  REQUIRED  PARAMETER  FOR  'SORT-FLD2-OR-BLANKS ' | cr | | nl | =* 


nil  ENTER  REQUIRED  PARAMETER  FOR  'SORT-FLD3-OR-BLANKS ' | cr I | nl | »“ 
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rM 


T9700  RUN-ID? 


T9710  | cr | |nl|$  IDENT?  * 

T9750  | cr | | nl| MUST  BE  12  CHARACTERS  OR  LESS' 

T9754  | cr | | nl | SNUM8  NOT  IN  SYSTEM' 

T9755  | cr | |nl|LOOK,  MORE,  DELE,  ABRT,  QUIT?  ' 

T9756  | cr | | nl | SNUMB(S)-  ' 

T9757  | cr | jnl|SNUMB?  “ 

T9758  | cr | | nl | SNUMB  NOT  IN  TABLE | cr | | nl 

T9759  | cr | | nl | snumb?' 

T9760  look | cr  I" 

T9761  more | cr I" 

T9762  dele' 

T9763  abrt |cr | “ 

T9764  quit  |  cr  |' 

T9780  | cr | |nl|please  direct,  release,  or  hold  before  exit|cr||nl| 

T9800  JOUT  INVOKED  FOR  SNUMB' 

T9801  | cr | | nl| function?' 

T98Q2  print  $$|cr|“ 

T9803  prin  $S| cr | ' 

T10170  end  of  SS' 

T10180  holdlcrl* 

T1019Q  rele“ 

T10200  direct  ac|cr|“ 

T10205  direct  onl|cr|“ 

T10210  normal  termination  “ 
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T10230  print  74|cr|" 

T10240  prin  74|cr|* 

T10250  end  of  74* 

T10260  | cr | | nl| 74  not  found* 

T10270  output  not  found* 

T10280  output  busy* 

T10290  NOT  IN  SYSTEM* 

T10300  INVOKE  JOUT  MANUALLY* 

T11000  |cr||nl||ff||cr||nl| TELECONFERENCING  AT  * 

T11001  | cr | | nil  ILLEGAL  CLASSIFICATION  CODE* 

T11010  | cr | | nl| USER  ASSISTANCE  IS  AVAILABLE  IN  TALK  AND  COMMAND  MODES.  |cr||-> 

nil 

THE  QUESTION  MARK  (?)  WILL  INTRODUCE  YOU  TO  THIS  FEATURE.  |cr||nl| 

Icr | | nl | INITIATE,  RECONVENE,  OR  JOIN?* 

T11020  j 1 cr | * 

Til  021  jolcrl* 

Til  022  joi|cr|“ 

Til  023  join | cr | “ 

Til 030  | cr | | nl | NAME  OF  CONFERENCE  YOU  WISH  TO  JOIN?* 

T11031  LINE  TERMINATED* 

Til  040  * 

T11050  | cr | | nl| PARTICIPANT'S  NAME?  * 

T11051  |cr | | nl| SORRY,  THAT  CONFERENCE  IS  NOT  IN  SESSION* 

T11070  | cr | | nl| PARTICIPANT'S  PASSWORD?  |cr||nl| 

*%&<%#>?*#$%#? AM*5*48#N&# | cr | 

TXOGWBMWEPVRMCBQNKMGAKZMA | cr  |  “ 

T11071  |cr | | nl| SORRY,  NAME  GIVEN  NOT  RECOGNIZED* 

T11Q72  1 cr 1 | nl | ACCESS  DENIED 
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T1 1 090  | cr 1 1 nil  THE  FOLLOWING  QUESTIONS  CONCERN  TRANSCRIPT  DELIVERY  |cr||nl| 

ENTER  HOST  NAME  FOR  DELIVERY  OF  YOUR  COPY 

T11110  | cr | | nl | ENTER  YOUR  ACCOUNT  NUMBER,  NAME  FOR  |cr||nl| 

IDENT  CARD  * 

Til 091  | cr | | nl| ACCESS  GRANTED  “ 

Til 111  | cr | | nl| ENTER  YOUR  ACCOUNT  NUMBER,  NAME  FOR  |cr||nl| 

IDENT  CARD—* 

Til  120 

T11140  | cr | | nl| CONFERENCE  SECURITY  CLASSIFICATION  CODE  IS  * 

Til  150  | nl| THERE  ARE  NO  ANNOUNCEMENTS  AT  THIS  TIME  |cr|* 

Till 51  |  nl|  ANNOUNCEMENT  MESSAGE  NUMBERS  ARE|cr||nU* 

Til 160  | nl| LATEST  MESSAGE  NUMBER  IS* 

Til 170  | nl| LAST  MESSAGE  SEEN  WAS  NUMBER* 

Till  80  I  nil  I ff 1 1 cr I |nl| LISTEN  MODE  ENTERED  IN  “ 

Til 190  HAS  JOINED  THE  CONFERENCE  “ 

Til 191  HAS  LEFT  THE  CONFERENCE  " 

T11500  | cr | | nl| |ff | | cr | |nl| LISTEN  MODE  ENTERED  IN  * 

T11510  | ff | * 

T11600  | cr | | nl | | ff | “ 

T12000  | cr | | nl| COMMAND  ?“ 

T12001  I cr | | nl| |ff | | cr | | nl| COMMAND  ?* 

T12010  bull* 

T12011  comm" 

T12012  defi* 

T12013  floo* 


I 

l'«!« 


T12014  give* 


T12016  prin* 
T12017  quit* 
T12018  revi* 


T12019 
T12020 
T12021 
T12022 
T12040 
T12041 
T1 2050 
T12060 

T12061 
T12070 
T12071 
T12072 
T1 2080 
T12100 

T12101 

T12102 

T12103 

T12104 

T12105 


stat* 

talk* 

?* 

desc* 

|cr | | n L | NO  MESSAGES  WAITING* 

|cr| |nl| |ff | |cr| |nl| MESSAGE  NUMBER* 

COMMAND  ?* 

|  cr  1 1  nl|  ENTER  ONE  LINE  PER  PROMPT  (-),  13  LINES  MAX  |cr||nl| 
NULL  INPUT  OR  ALL  SPACES  =  END  OF  MESSAGE 

| cr | | nl| INVALID  COMMUNICATION  ARGUMENT  * 

I cr | I n l | — “ 

| cr | | nl| COMMUNICATION  SENT  * 

| cr | | nl| COMMUNICATION  REQUEST  IGNORED  * 

I  cr  I  “ 

| cr | | nl| FLOOR  RECORDING  IS  OFF  |cr||nl| 

COMMAND  ?“ 

Icr | |nl| FLOOR  RECORDING  IS  ON  |cr||nl| 

COMMAND  ?" 

Icr 1 1 nil  CONFERENCE  IS  OPEN  TO  JOINING  PARTICIPANTS  |cr||nl| 
COMMAND  ?“ 

icr | | nl| CONFERENCE  IS  CLOSED  TO  JOINING  PARTICIPANTS  |cr||nl| 
COMMAND  ?" 

| cr | | nl| OPTION  RESTRICTED  TO  INITIATING  CHAIRMAN | cr | | nl | 
COMMAND  ?" 

|cr | | nil  OPTION  RESTRICTED  TO  CURRENT  CHAIRMAN  |cr||nl| 
COMMAND  ?* 


T12106 

T121Q7 
T12108 
T12120 
T12121 
T12122 

T12200 
T12201 
T12202 
T12203 
T12210 
T12230 

T12240 
T12250 

i 

!  T12251 

T12252 
T12270 
T12271 
T12272 
T12273 
T12274 

T12350 
T1 2360 


t 


| cr | | nil  NO  ALTERNATES  HAVE  BEEN  ASSIGNED | cr | |nl| 

COMMAND  ?“ 

CHANGE?  |cr| |nll“ 

FILE  INSERT  LIMIT  IS—  " 

| cr 1 1 nil  HOST?  | cr 1 1 nt| “ 

|cr|  InllSIDENT?  |cr||nl|* 

| cr | | nil  NEW  IDENT  CARD  NOT  VALID  AT  THIS  HOST  |cr||nl| 

CHANGE?  IcrllnlT 

| cr | | nl| ENTER  ONE  LINE  OF  TEXT  TO  BE  SENT  WITH  YOUR  REQUEST* 

| cr | | nl| SORRY,  CHAIRMAN  NOT  PRESENT  TO  GRANT  FLOOR  PRIVILEGE* 

|cr 1 1 nil  FLOOR  INVALID  COMMAND* 

|cr  |  |  nl|  INVALID  FLOOR  COMMAND  ARGUMENT—* 

| cr | |nl| (ENTER  BREAK  STATUS  OR  NULL  RESPONSE  IF  TEXT  IS  NOT  DESIRED)* 

| cr | | nil  CHAIRMAN'S  APPROVAL  IS  BEING  REQUESTED,  CONTINUE  YOUR  ACTIVITY 
Y* 

| cr | | nl| COMMAND  VALID  FOR  FLOOR  ONLY* 

| cr 1 1 nil  PRINT  REQUEST  INCOMPLETE  OR  INVALID  * 

| cr 1 1 nil  MESSAGE  NUMBER  TOO  HIGH  * 

CHANGE?" 

|cr 1 1 nil  ENTER  HOST  NAME  FOR  DELIVERY  OF  YOUR  COPY 
| cr | | nil  INVALID  HOST  NAME 
| cr 1 1 nil  CHANGE?  * 

| cr 1 1 nil  ENTER  YOUR  ACCOUNT  NUMBER,NAME  FOR  IDENT  CARD  |cr||nl|“ 

I cr | | nl| IDENT  INFORMATION  NOT  VALID  AT  THIS  HOST | cr | | nL | 

DO  YOU  WISH  TO  CHANGE  ITIYES  OR  NO)?" 

| cr 1 1 nil  QUIT  SUCCESSFUL  * 

| cr | | nil  INVALID  REVIEW  REQUEST" 


A  -  93 


T12470  | er 1 1 nil  I cr 1 1 nil  THIS  TERMINAL  IS  CURRENTLY  IN  COMMAND  MODE. | cr | | nl | | c-> 

r| | nl | 

COMMAND  MODE  ALLOWS  A  PARTICIPANT  TO  ENTER  OTHER  MODES,  TO | cr | | nl | 
OBTAIN  CONFERENCE  INFORMATION  AND  TO  PERFORM  SPECIFIC  FUNCTIONS. | cr | |-> 
nil 

A  SPECIFIC  COMMAND  CAPABILITY  IS  ACQUIRED  BY  RESPONDING  WITH  A | cr | | nl-> 


COMMAND  VERB  TC 
ARE: | cr | | nl | | cr 

1  THE  PROMPT  ' 
llnll 

COMMAND? ' . 

THE  POSSBLE  RESPONSES | cr | | nl | 

ADD 

cr | | nl | 

ADJOURN 

ANNOUNCE 

BULLETIN 

CHAIR  TO |“> 

COMMUNICATION 

1  nl  | 

DEFINITION 

DELETE 

DESCRIBE 

ERASE |cr|-> 

FLOOR 
r| | nl 1 

FORMAT 

GIVEUP 

INSERT 

KEYWORD |c-> 

LISTEN 

llnll 

POAC 

PRINT 

QUIT 

REVIEW |cr-> 

STATUS 

TALK 

TERMINATE 

? | cr  1 1 nl | 

I  1 cr | | nl | 

AN  EXPLANATION 

OF  EACH  VERB 

IS  POSSIBLE 

BY  responding! 

1  cr 1 1 nl | 

'DESCRIBE  VERB1 

—WHERE  VERB 

IS  ANY  VALID 

COMMAND  MODE 

VERB. | cr | | nl| |c-> 

r | | nl | 


EXAMPLE | cr | | nl| 

COMMAND ? DESCRIBE  FLOOR |cr||nl| 


1  cr  | 

I  nl| 

COMMAND  ?* 

T12500 

1  cr  | 

I  nl  | 

Iffl 

|  cr  |  |nl|>»ADD«< 

1  cr  | 

1  nl  | 

T12501 

l  cr  | 

|nl| 

|ff| 

|  cr  |  |nl|>» ADJOURN<<< 

1  cr| 

1  nl  | 

T12502 

1  cr  | 

I  nl  | 

Iffl 

I  cr  |  |  nl  |  »> ANNOUNCE<<< 

1  crl 

1  nl  | 

T12503 

1  cr  | 

1  nl  | 

Iffl 

I  cr  |  |  nl  |  >»BULL ET I N<« 

1  cr 

1  nl  | 

A 

T1 2504 

1  cr  | 

1  nl  | 

Iffl 

|  cr  1 1  nl  | >»CHAIR  T0<« 

1  cr 

|nl| 

A 

T12505 

1  crl 

I  n  L  | 

Iffl 

|  cr|  |nl|»>COMMUNlCATION<« 

1  cr  J 

1  nil 

A 

T12506 

1  cr  1 

1  nl  | 

Iffl 

I  cr  1 1  nl  |  »>DE FINITION<<<  |  cr 

1  nl  | 

A 

T12507 

1  cr| 

1  nl  | 

Iffl 

|  cr  1 1  nl  |  »>DELETE<«  |  cr  | 

1  nl  i 

- 

T12508 

1  cr  | 

1  nl  | 

Iffl 

|  cr  |  |  nl  |  »>DESCRIBE«< 

1  cr| 

1  nl  | 

T12509 

1  cr  | 

1  nl  | 

Iffl 

|  cr |  | nl | »>ERASE<«  |cr| 

1  nl  | 

A 

T12510 

1  cr  | 

I  nl  | 

Iffl 

|  cr  1 1  nl  |  »>FLOOR<« 

1  cr| 

1  nl  | 

T12511 

1  cr  | 

1  nl  | 

Iffl 

| cr|  | nl | »>FORMAT<« | cr | 

1  nl| 

- 

T12512 

1  cr  | 

I  nl  | 

Iffl 

|  cr  1 1  nl  |  »>GIVEUP<« 

1  cr| 

1  nl  | 

T12513 

1  cr 

1 1  nl 

llffl 

|cr 

I  |nl|»>INS£RT«< 

1  cr  | 

|nl|* 

T12514 

1  cr 

1 1  nl 

1  Iff  1 

1  cr 

|  |  nl  | »>KEYWORD«< 

Icrllnll* 

T12515 

1  cr 

1 1  nl 

llffl 

1  cr 

I  |nl|»>LISTEN«< 

Icrllnll* 

T12516 

1  cr 

1 1  nl 

llffl 

1  cr 

|  |nl|»>POAC«< 

Icrllnll* 

T12517 

1  cr 

1 1  nl 

llffl 

1  cr 

|  |nl|»>PRINT«<  |  cr 

1  nl  | 

T12518 

1  cr 

1  |nl 

llffl 

1  cr 

|  |nt|»>auiT«< 

1 cr | |nl|* 

T12519 

|cr 

1 1  nl 

llffl 

1  cr 

1 1  n  1 1  »>REV  IEW«< 

Icrllnll* 

T12520 

1  cr 

1 1  nl 

llffl 

1  cr 

|  |nl|»>STATUS«< 

1  cr | | nl | * 

T12521 

1  cr 

1 1  nl 

llffl 

|cr 

|  |nl|»>TALK«< 

1 cr | | nl | * 

T12522 

1  cr 

1 1  nl 

llffl 

1  cr 

|  |  nl  |  »>TERMINATE«< 

Icrllnll* 

T12523 

1  cr 

1 1  nl 

llffl 

1  cr 

1 1 nl  | »>  ?  «< 

Icrllnll* 

T12524 

1  cr 

1 1  nl 

| INVALID 

DESCRIBE  ARGUMENT  PASSED 

A 

T12600 

1  cr 

1  1  nl 

1  THIS 

VERB'S  USAGE  IS  RESTRICTED 

TO  THE  CURRENT  CHAIRMAN  AND  A-> 

LLOWS | cr | | nil 

HIM  TO  ADO  TO  THE  VALID  PARTICIPANT  LIST  FOR  THE  CONFERENCE.  IT|cr||-> 
nil 

ALSO  ALLOWS  HIM  TO  CORRECT/CHANGE  THE  USERID  ASSOCIATED  WITH  . | cr | |nl-> 

I 

PARTICULAR  PARTICIPANT  NAME.  A  PARTICIPANT  NAME  CANNOT  BE  CHANGED. |c-> 
r| |nl| 

THE  USERID  AND  PARTICIPANT  NAME  TO  BE  ADDED/CORRECTED  MUST  FOLLOW | cr|-> 
I  n  1 1 

THE  VERB  IN  THE  SAME  FORMAT  USED  DURING  CONFERENCE  INITIATION | cr | | nl | 
DEFINITION. | cr || nL| | cr | |nl| 

EXAMPLE | cr | fnl| 

COMMAND? ADD  USERID/PNAME I cr | | nl | 

I cr I | nl| COMMAND  ?* 

T12610  | cr I | nl| THIS  VERB'S  USAGE  IS  RESTRICTED  TO  THE  CURRENT  CHAIRMAN  AND  A-> 

LLOWS | cr | |nl| 

HIM  TO  ADJOURN  A  CONFERENCE  SESSION.  AN  ADJOURNED  CONFERENCE  CAN|cr|-> 
I  n  1 1 

BE  RECONVENED  AT  A  LATER  TIME.  AN  ADJOURNMENT  WILL  NOT  TAKE  PLACE |cr-> 
I  Ini  | 

IF  THERE  ARE  ACTIVE  PARTICIPANTS  OTHER  THAN  THE  CHAIRMAN  STILL | cr | | nl-> 

I 

CONNECTED  TO  THE  CONFERENCE.  NO  PARTICIPANTS  ARE  PERMITTED  TO  JOlN|c-> 
r|  I  nl  | 


THE  CURRENT  SESSION  OF  THE  CONFERENCE  ONCE  THE  ADJOURN  IS  ENTERED. | cr-> 
llnll 

EXAMPLE icr | | nl| 

COMMAND7ADJOURN | cr |  |nl| 

I cr 1 1 nil  COMMAND  7* 

T12620  | cr| |nl|THIS  VERB'S  USAGE  IS  RESTRICTED  TO  THE  CURRENT  CHAIRMAN  AND  A-> 

LLOWSlcrl | nil 

HIM  TO  CREATE  A  LIST  OF  MESSAGES  TO  BE  DISPLAYED  TO  PARTICIPANTS | cr | | -> 
nil 

UPON  JOINING.  IT  ALLOWS  HIM  TO  CHANGE  OR  DELETE  THE  LIST. | cr | | nl | 
ARGUMENTS  FOR  THE  VERB  ARE  A  LIST  OF  UP  TO  10  VALID  MESSAGE  NUMBERS |c-> 
H  I  nl  | 

DELIMITED  BY  SEMICOLONS.  IF  NO  ARGUMENTS  ARE  FOUND  THE  ANNOUNCEMENT |-> 
cr | | nl | 

LIST  IS  PURGED. |cr| |nl| |cr| |nl| 

EXAMPLE  1 |cr I jnl| 

COMMAND? ANNOUNCE  2;3;5|cr | |nl| | cr | |nl| 

(MESSAGES  2,  3,  5  WILL  BE  ANNOUNCED  TO  NEW  PARTICIPANTS  AS|cr||nl| 

THEY  JOIN.) | cr | |nl| | cr I | nl | 

EXAMPLE  2 | cr I |nl j 
C0MMAND7ANN0UNCE | cr | |nl| |cr| |nl| 

(ANY  PREVIOUS  ANNOUNCEMENT  LIST  WILL  BE  ERASED.) | cr | | nl | 

Icr | | nl| COMMAND  7* 

T12630  |cr | | nl| THIS  VERB  ALLOWS  AN  INDIVIDUAL  PARTICIPANT  TO  SEE  THE  NEXT  ME-> 
SSAGE | cr | | nl | 

QUEUED  TO  HIS  TERMINAL  WITHOUT  ENTERING  LISTEN  MODE.  ONLY  ONE | cr | | nl-> 

MESSAGE  WILL  BE  RECEIVED  PER  EACH  BULLETIN  REQUEST. | cr | | nl | | cr | | nl | 
EXAMPLE |cr | | nl| 

C0MMAND7BULLETIN |cr||nl||cr||nl| 

Icr | | nl| COMMAND  7" 


T12640 


cr | | nl | 
TIME  I cr-> 


I cr | | nl | THIS  VERB'S  USAGE  IS  RESTRICTED  TO  THE  CHAIRMAN  (CURRENT  OR|c-> 
r|  I  nl  | 

ORIGINAL).  THE  CURRENT  CHAIRMAN  MAY  PASS  THE  CHAIRMANSHIP  TO 
ANOTHER  ACTIVE  PARTICIPANT.  THE  ORIGINAL  CHAIRMAN  CAN  AT  ANY 
llnll 

RETAKE  THE  CHAIRMANSHIP  HE  PREVIOUSLY  PASSED. | cr | | nl | | cr | | nl | 

EXAMPLE  1 |cr | | nl| 

C0MMAND7CHAIR  TO  PARTICIPANT  NAME | cr | | nl | | cr | | nl | 

(THE  CHAIRMANSHIP  WILL  BE  GIVEN  TO  THE  NAMED  PARTICIPANT.) | cr | | nl | | cr-> 
||nl| | cr | | nl | 

EXAMPLE  2 |cr | |nl| 

COMMAND? CHAIR  TO | cr | | nl | | cr | | nl | 

(FORM  OF  VERB  INITIATING  CHAIRMAN  WOULD  USE  TO  RETAKE  THE|cr||nl| 
CHAIRMANSHIP.) |cr| |nl| |cr| |nl| 

ANOTHER  FUNCTION  OF  THIS  COMMAND  IS  TO  ALLOW  A  DESIGNATED  ALTERNATE | c-> 
r| l nl 1 
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TO  ASSUME  THE  CHAIRMANSHIP.  THIS  MAY  ONLY  BE  DONE  IF  THE  CONFERENCE |-> 
cr | | nl | 

IS  WITHOUT  A  CHAIRMAN  AT  THE  TIME  THE  COMMAND  IS  INVOICED .  |  cr  1 1  nl  |  |  cr  |-> 
Inll 

EXAMPLE  3 1 cr | l n L 1 
COMMAND7CHAIR  TO | cr | | n L | | cr | | nl | 

(THE  DESIGNATED  ALTERNATE  WILL  RECEIVE  THE  CHAIR  IF  IT  IS  VACANT.) 

I cr 1 1 nil  COMMAND 

T12650  | cr | | nl| THIS  VERB  WILL  ALLOW  INFORMAL  MESSAGE  TEXT  TO  BE  SENT  TO  SEVE-> 

RALlcr | | nl| 

OR  ALL  ACTIVE  PARTICIPANTS.  IT  DIFFERS  FROM  A  TALK  MESSAGE  IN  THAT|c-> 
r|  I n 1 1 

THE  MESSAGE  IS  NOT  WRITTEN  TO  THE  TRANSCRIPT  AND  IS  DELIVERED  WITH|cr-> 
1 1  nl| 

PRIORITY  MESSAGES.  THIS  MEANS  THE  RECIPIENT  DOES  NOT  HAVE  TO  BE  IN|c-> 
r| |nl| 

LISTEN  MODE  TO  RECEIVE  THE  COMMUNICATION. | cr | | nl | | cr | | nl | 

EXAMPLE | cr | | nil 

COMMAND? COMMUNICATION  SALL|cr| |nl| 

ENTER  TEXT  WHEN  PROMPT  CHARACTER  APPEARS  C-),|cr||nl| 

MAXIMUM  INPUT  IS  13  LINES | cr | | nl | 

NULL  INPUT  OR  ALL  SPACES  INDICATES  END  OF  MESSAGE | cr | | nl | 
-this  is  an  example  OF  A  GENERAL  COMMUNICATION  REQUEST Icr I |-> 
nil 

“(CR) | cr | |nl| | cr | |nl| 

EXAMPLE |cr | |nl| 

COMMAND? COMMUNICATION  TO  PARTICIPANT!  | cr | | nl  | 

ENTER  TEXT  WHEN  PROMPT  CHARACTER  APPEARS  C-),|cr||nl| 

MAXIMUM  INPUT  IS  13  LINES | cr I | nl | 

NULL  INPUT  OR  ALL  SPACES  INDICATES  END  OF  MESSAGE | cr I | nl | 
-THIS  MESSAGE  WILL  BE  DELIVERED  TO  PARTICIPANT  1|cr||nl| 

-<CR) | cr | | nl | 

Icr | | nil  COMMAND  ?“ 
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Icr | | nil  THIS  VERB  DISPLAYS  THE  STATE  OF  SEVERAL  CONFERENCE  PARAMETERS-> 
.  IN | cr | | nl | 

SOME  CASES  IT  ALLOWS  THE  STATE  TO  BE  CHANGED.  A  REQUEST  MAY  8E|cr||n-> 

LI 

GENERAL  OR  SPECIFIC.  A  GENERAL  REQUEST  WILL  DISPLAY  ALL  INFORMATION |-> 
cr | |nll 

TO  WHICH  THE  USER  IS  ENTITLED.  A  SPECIFIC  REQUEST  WILL  DISPLAY  THE|c-> 
r||nl| 

REQUESTED  INFORMATION,  AND  PROMPT  FOR  CHANGE  WHEN  CHANGE  IS  POSSI-|cr-> 
I  |nl| 

BLE. | cr 1 1 nl 1 1 cr  t !nl| 

DEFINITION  —  THOSE  CONFERENCE  PARAMETERS  AVAILABLE  FOR|cr|-> 

Inl| 


VIEWING  BY  THE  INDIVIDUAL  ARE  DISPLAYED | cr | | nl | 


DEFINITION  SCC  —  DISPLAYS  CONFERENCE  SECURITY  CLASSIFICA-| -> 


cr| |nl| 

TION;  CAN  BE  CHANGED  BY  THE  CURRENT  CHAIRMAN | cr| | nl | 
DEFINITION  ACCESS  —  INFORMS  AS  TO  WHETHER  NEW  PARTICIPANTS^ 
MAY  JOIN; | cr | |nl  | 

CAN  BE  CHANGED  BY  THE  CURRENT  CHAIRMAN | cr | |nl| 

DEFINITION  FLOOR  —  INFORMS  AS  TO  WHETHER  FLOOR  RECORDING  I-> 
S  TAKING | cr | | nil 

PLACE;  CAN  BE  CHANGED  BY  THE  CURRENT  CHAIRMAN | cr | | nl | 
DEFINITION  FILE  —  DISPLAYS  THE  NAME  OF  THE  TRANSCRIPT  FILE-> 

I cr 1 | nl | 

DEFINITION  ANNOUNCE  —  DISPLAYS  THE  ANNOUNCEMENT  MESSAGE |cr-> 

1 1  nl  I 

NUMBERS;  CAN  BE  CHANGED  BY  THE  CURRENT  CHAIRMAN  USING |-> 

cr| | nl | 

COMMAND  MODE  VERB  ANNOUNCE | cr | | nl | 

DEFINITION  INSERT  —  DISPLAYS  CURRENT  INSERT  FILE  LINE | cr | | -> 
nil 

LIMIT;  CAN  BE  CHANGED  BY  CURRENT  CHAIRMAN  USING | cr | | nl-> 

I 

COMMAND  MODE  VERB  INSERT|cr| |nl| 

DEFINITION  KEYWORD  —  TELLS  HOW  MANY  KEYWORDS  ARE  CURRENT-|-> 

cr | | nl | 

LY  ASSIGNED;  CAN  BE  CHANGED  BY  THE  CURRENT  CHAIRMAN | cr-> 

I I  nil 

USING  COMMAND  MODE  VERB  KEYWORD | cr | |nl | 

DEFINITION  CHAIR  —  DISPLAYS  TO  THE  INITIATING  CHAIRMAN | Cr | -> 

Inlj 

HIS  PASSWORD  AND  PROMPTS  HIM  FOR  CHANGE | cr | | nl | 
DEFINITION  PARTICIPANT  —  DISPLAYS  TO  THE  CHAIRMAN  THE | cr | | -> 
nil 

CURRENT  PARTICIPANT  PASSWORD  AND  PROMPTS  FOR  CHANGE |cr-> 

1 1  nil 

DEFINITION  LIST  —  DISPLAYS  A  LIST  OF  ALL  VALID  PARTICI-| cr~> 

1 1  nl  | 

PANTS,  FOR  THE  CURRENT  CHAIRMAN  IT  ALSO  DISPLAYS  THE|c-> 

r  I  I  n  L  | 

ASSOCIATED  USERID;  CAN  BE  CHANGED  BY  THE  CURRENT | cr | |n-> 

U 

CHAIRMAN  USING  COMMAND  MODE  VERB  ADD | cr I | nl | 

DEFINITION  DELIVERY  —  DISPLAYS  USER  TRANSCRIPT  DELIVERY |cr-> 

1 1  nl  | 

INFORMATION  PROVIDED  DURING  JOIN  PROCESSING  AND|cr||nl-> 

I 

PROMPTS  FOR  CHANGE | cr | | nl| 

DEFINITION  ALTERNATE  —  DISPLAYS  THE  NAMES  OF  THOSE  PARTI-|-> 

cr | | nl | 

CIPANTS  WHO  HAVE  BEEN  DESIGNATED  AS  ALTERNATE  CHAIRMANS 

J I cr | | nl | 

CAN  BE  CHANGED  BY  THE  CURRENT  CHAIRMAN | cr | | nl | | cr | | nl | 
EXAMPLE | cr | |nl| 


COMMAND?DEFINITION  DELIVERY  I C r | | nl | 

DELIVERY  INSTRUCTIONS  FOR  YOUR  COPY  OF  TRANSCRIPT | cr | | nl | 
HOST-HOST  NAME |cr|| nil 
SIDENT-SIDENT  INFORMATION | cr | | nl | 

CHANGE7YES | cr | | nil 
HQST7HOST  NAME|cr| |nL| 

SIDENT-lNULL,  WILL  NOT  CHANGE) | cr | I nl | | cr | | nl| 

Icr 1 1 nil  COMMAND  7" 

T12670  |cr | | nil  THIS  COMMAND  ALLOWS  THE  CHAIRMAN  TO  REMOVE  AN  UNUSED  PARTICIP-> 
ANT| cr | | nL | 

NAME  FROM  THE  LIST  OF  NAMES  ACCEPTABLE  TO  THE  CONFERENCE.  A  LIST  OF|-> 

cr | | nl | 

UNUSED  NAMES  IS  AVAILABLE  BY  INVOKING  THE  COMMAND  WITHOUT  AN|cr||nl| 
ARGUMENT. |cr||nl||cr||nl| 

EXAMPLE  1 |cr j |nl| 
command? delete | cr I |ni| 

(LIST  OF  UNUSED  PARTICIPANT  NAMES) | cr I | nl | | cr | | nl | 

EXAMPLE  2 |cr l|nl| 

COMMAND? DELETE  PARTICIPANTS | cr | | nl | 

Icr | | nil  COMMAND  ?* 

T12680  |cr 1 1 nil  THIS  VERB  IS  USED  TO  OBTAIN  AN  EXPLANATION  OF  COMMAND  MODE|cr~> 
1 1  nil 

VERBS.  TO  RECEIVE  AN  EXPLANATION  OF  A  VERB,  THE | cr | | nl | 

VERB  WOULD  FOLLOW  THE  WORD  'DESCRIBE'.  THE  VERBS  THAT  CAN  BE|cr||nl| 


DESCRIBED 

ARE: 1 cr 1 |nl| |cr | | 

nil 

ADD 

cr | | nl | 

ADJOURN 

ANNOUNCE 

BULLETIN 

CHAIR  TO |-> 

COMMUNICATION  DEFINITION 
Ini  | 

DELETE 

DESCRIBE 

ERASE |cr|-> 

FLOOR 
r| | nl | 

FORMAT 

GIVEUP 

INSERT 

KEYWORD |c-> 

LISTEN 

llnll 

PDAC 

PRINT 

QUIT 

REVIEW |cr-> 

1 cr 1 | nl | 

STATUS 

TALK 

EXAMPLE | cr | | nl  | 
C0MMAND7DESCRI8E 

TERMINATE 

FLOOR | cr | | nil 

?|cr| | nl | 

Icr 1 1 nil  COMMAND  7* 


T12690  | cr | | nl |THIS  COMMAND  IS  USED  BY  THE  CHAIRMAN  TO  REMOVE  THE  TEXT  OF  A  -> 

MESSAGE Icr | | nil 

FROM  THE  CONFERENCE  TRANSCRIPT.  THE  MESSAGE  BANNER  WILL  BE  RETAINED |-> 
cr | | nl | 

WITH  A  NOTE  STATING  THAT  THE  MESSAGE  HAS  BEEN  DELETED.  A  MESSAGE  I cr |-> 
Ini  | 

BEING  READ  CANNOT  8E  ERASED. | cr| | nl | | cr I | nl | 

EXAMPLE |cr | | nil 
COMMAND7ERASE  5  I cr | | nl | 

Icr | | nil  COMMAND  7* 
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T12700  | cr | | nL | THE  PURPOSE  OF  THE  FLOOR  IS  TO  ALLOW  A  PARTICIPANT  TO  ADDRESS->  i 

Icrljnlj 

MULTIPLE  PARTICIPANTS  AT  THE  SAME  TIME.  THE  FLOOR  PRIVILEGE  CAN | cr | | -> 
nil 

ONLY  BE  ATTAINED  BY  DIRECT  ACTION  ON  THE  PART  OF  THE  CHAIRMAN.  THIS|->  \ 

cr I | nl|  j 

ACTION  CAN  BE  AT  THE  CHAIRMAN'S  INITIATIVE  OR  PROMPTED  BY  A|cr||nl| 
PARTICIPANT  REQUEST. | cri |nl| |cr| |nl| 

FLOOR  —  REQUEST  BY  PARTICIPANT  OR  CHAIRMAN  FOR  THE  FLOOR. |-> 

cr | | nL | 

THE  PARTICIPANT  MUST  WAIT  FOR  INTERVENTION  BY  THE | cr | | -> 
nil 

CHAIRMAN.  THE  CHAIRMAN  WOULD  AUTOMATICALLY  RECEIVE |cr-> 

llnll 

THE  FLOOR | cr | |nl| 

FLOOR  CT03  PARTICIPANT  NAME  —  WITH  THIS  FORM  OF  THE|cr||nl-> 

I 

COMMAND  THE  CHAIRMAN  CAN  GIVE  THE  FLOOR  TO  A  PARTICI-|-> 

cr | | nL | 

PANT.  IF  THE  PARTICIPANT  ACCEPTS  RECEIPT  OF  THE|cr||n-> 

U 

FLOOR,  ANYONE  CURRENTLY  OCCUPYING  THE  FLOOR  WOULD|cr||-> 
nil 

IT | cr | | nl | 

FLOOR  FREE  —  WITH  THIS  FORM  OF  THE  COMMAND  THE  CHAIRMAN | cr-> 

llnll 

CAN  TAKE  THE  FLOOR  FROM  WHOMEVER  HAS  IT  AND  LEAVE  IT|c-> 

•"I  I  nl  1 

VACANT | cr | |nl| 

FLOOR  CANCEL  —  A  PARTICIPANT  WOULD  USE  THIS  FORM  OF  THE|cr-> 

llnll 

COMMAND  TO  CANCEL  A  FLOOR  REQUEST  NOT  YET  ACTED  UPON|c-> 

rllnll 

BY  THE  CHAIRMAN | cr| |nl| | cr I | nl | 

EXAMPLE | cr | |nt| 

COMMAND? FLOOR  TO  PARTICIPANT  NAME  I cr | | nl | | cr I | nl | 

(FLOOR  WILL  BE  TAKEN  FROM  WHOMEVER  MIGHT  HAVE  IT,  AND  GIVEN  TO  THE|cr-> 
llnll 

NAMED  PARTICIPANT  IF  HE  ACCEPTS  THE  FLOOR) | cr | | nl | 

Icr | | nl| COMMAND  ?“ 

T12710  | cr I | nL | THIS  COMMAND  IS  USED  BY  THE  CHAIRMAN  TO  ESTABLISH  THE  HEADER  -> 

Toler | | nil 

APPEAR  AT  THE  BEGINNING  OF  TALK  MESSAGES.  THE  COMMAND  WILL  PROMPT |cr-> 
llnll 

FOR  INPUT  WHEN  THE  OPTIONS  DESIRED  ARE  NOT  PART  OF  THE  INITIAL | cr | | nl-> 

I 

REQUEST.  THE  OPTIONS  ARE  IMPLEMENTED  IN  THE  ORDER  RECEIVED.  END  OF|-> 
cr I | nl | 

REQUEST  IS  INDICATED  BY  TRANSMITTING  SEND  OR  EDM  TO  THE  INPUT  PROMPT. -> 
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I  c  r | |nl| 

THE  OPTIONS  MAY  3E  CHANGED  AT  ANYTIME.  THEY  MAY  BE  CANCELLED  BY  USE|-> 
cr| | nlj 

OF  THE  ARGUMENT  CANCEL.  THE  OPTIONS  ARE: | cr | |nl | | cr | |nl | 

CLASSIFICATION  DATE-TIME-GROUP  FROM  INFORMATION | cr | | nl-> 

I 

REFERENCE  SUBJECT  TO | cr | |nl| | cr | |nl| 

EXAMPLE  1  |  cr | | nl| 

COMMAND? FORMAT  TO; FROM;SUBJECT;$END | cr | |nl| |cr| |nl| 

EXAMPLE  2 | cr | | nil 

COMMAND? FORMAT  CANCEL | cr| | nl| 

I  cr 1 1 nl| COMMAND  ?* 

T12720  | cr | | nl| THIS  VERB  ALLOWS  A  PARTICIPANT  TO  RELINQUISH  THE  FLOOR | cr | | nl-> 

I 

PRIVILEGE.  IT  IS  INVALID  IF  THE  PARTICIPANT  DOES  NOT  HAVE  THE|cr||nl-> 

I 

FLOOR. | cr 1 | nl 1 | cr | |nl| 

EXAMPLE j cr | |nl| |cr| |nl| 

COMMAND?GIVEUP|cr| jnl| 

I cr | | nl| COMMAND  ?* 

T12730  | cr | | nl | THIS  IS  A  CHAIRMAN  ONLY  VERB.  IT  ALLOWS  HIM  TO  CONTROL  THE  N-> 

UMBER | cr | |nl| 

OF  LINES  THAT  CAN  BE  INSERTED  INTO  A  MESSAGE  FROM  AN  EXTERNAL  FILE.|c-> 

r | I nl | 

THE  LINES  CAN  BE  RESTRICTED  TO  A  VALUE  BETWEEN  1  AND  600,  OR  ANY |cr I | -> 
nil 

RESTRICTION  CAN  BE  COMPLETELY  ELIMINATED. | cr | | nl | | cr | | nl | 

EXAMPLE  1 | cr | I nl| 

COMMAND? INSERT  10|cr| |nl| |cr| |nl| 

EXAMPLE  2 | cr | | nl| 

C0MMAND7INSERT  ELIMINATE | cr | |nl| |cr| |nl| 

NOTE: NO  MORE  THAN  600  FULL  80  CHARACTER  LINES  MAY  MAKE  UP  A  CON-|cr||-> 
nil 

FERENCE  MESSAGE.  IF  THE  AVERAGE  LINE  CHARACTER  COUNT  IS  LESS  THAN | cr-> 

I I  nl  | 

80,  THE  MAXIMUM  POSSIBLE  LINES  WOULD  INCREASE.  IT  IS  ONLY  IN  THESE |c-> 
HI  nl| 

CASES  THAT  ELIMINATING  LINE  COUNT  HAS  ANY  MEANING. | cr | | nl | 

I cr | | nil  COMMAND  ?* 

T12740  | cr | | nl | MESSAGES  MAY  BE  ASSIGNED  A  SUBJECT  LINE  WHEN  THEY  ARE  BUILT.  -> 

THE|cr j | nl| 

SUBJECT  LINE  PROVIDES  FOR  TOPIC  ORIENTATION  AND  SELECTIVE  REVIEWING. |-> 
crl | nl | 


S 


|nl| 

SUBJECT. | cr | |nl| |cr| |nl| 

EXAMPLE | cr j |nl| 

COMMAND 7KEY WORD | cr  t |nl| 

ITEM7T  ANKS | c  r | | n  L | 

THE  SUBJECT  WORD  TO  BE  ADDED  IS-TANKS | cr |  | nl | 

(YES  OR  NO)?YES|cr| |nl| 

SUBJECT  WORD  ACCEPTED | cr | | nl | 

|cr | | nt| COMMAND  7" 

T12750  | c r | |nl|TO  RECEIVE  CONFERENCE  MESSAGES  AND  VIEW  FLOOR  ACTIVITY  A  PART-> 

ICIPANT  j  cr 1 1 nL| 

MUST  BE  IN  LISTEN  MODE.  THIS  VERB  TRANSFERS  A  PARTICIPANT  FROM|cr||n-> 

U 

COMMAND  MODE  TO  LISTEN  MODE.  IT  IS  INVALID  IF  THE  PARTICIPANT  HAS|cr-> 
1 1  nl  | 

THE  FLOOR. | cr 1 |nl| |cr| |nl| 

EXAMPLE j cr | |nl| 

COMMAND7LISTEN | cr | |nl| |cr| |nl| 

NOTE:  IT  IS  NOT  HONORED  IF  THE  PARTICIPANT  HAS  THE  FLOOR. | cr | | nl | 

I cr | | nl| COMMAND  7“ 

T12760  | cr | | nl| THIS  VERB  OPENS  A  CONNECTION  TO  A  DIRECT  ACCESS  PROGRAM  IN  TH~> 

E  SAME | cr | | nl | 

HOST.  THE  VERB  MUST  BE  FOLLOWED  BY  THE  NAME  OF  THE  DIRECT  ACCESS | cr |-> 

I  nl  | 

PROGRAM  TO  BE  CONNECTED  TO.  WHEN  NECESSARY  A  PDAC  CONNECTION  CAN  BE | -> 
cr | | nl | 

SUSPENDED.  THIS  IS  ACCOMPLISHED  BY  USING  '|"|S'  AS  THE  FIRST  CHARAC—> 

I cr | | nl | 

RUPTED  FOR  MESSAGES  FROM  THE  CONFERENCE.  THIS  INTERRUPTION  CAN  3E|cr-> 

I I  nl  | 

PREVENTED  BY  USING  * | ~ | N *  AS  THE  FIRST  CHARACTERS  OF  INPUT  FROM  THE | C-> 
H  I  nl  | 

TERMINAL.  TO  RESUME  RECEIPT  OF  MESSAGES  FROM  THE  CONFERENCE  THE  I cr | | -> 
nl| 

CHARACTERS  TIP'  WOULD  BE  USED.  | cr  |  |  nl |  |  cr  |  | nl | 

EXAMPLE | cr | | nil 
COMMAND7PDAC  TSS|cr||nl| 

Icr | | nil  COMMAND  7‘ 

T12770  | cr | | nl | THIS  VERB  ALLOWS  AN  INDIVIDUAL  TO  REQUEST  A  PRINTED  COPY  OF  S-> 

ELECTED |cr | | nil 

PORTIONS  OF  THE  TRANSCRIPT  DURING  THE  CONFERENCE.  THE  TRANSCRIPT | cr |-> 
Ini  | 

MAY  BE  OIRECTED  TO  A  REMOTE  PRINTER  OR  BY  DEFAULT  BE  DIRECTED  TO  THE|-> 
cr | | nl | 

SYSTEM  PRINTER.  SOME  VALIDITY  CHECKING  OF  THE  ARGUMENTS  IS  DONE|cr||-> 
nil 

PRIOR  TO  SPAWNING  THE  PRINT  JOB.  IF  AN  ERROR  IS  FOUND  THE | cr | | nl | 
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PARTICIPANT  WILL  BE  INFORMED  AND  THE  REQUEST  IGNORED.  THE  ARGUMENTS |-> 
cr | |nl| 

ARE: | cr | | nl| 

PRINT  ALL  —  ALL  CONFERENCE  MESSAGES  WILL  BE  PRINTED | cr I | nl-> 
PRINT  ALL  BY  PARTICIPANT  NAME  --  ALL  MESSAGES  BY  THE  NAMED |-> 

Cr | |nt | 

PARTICIPANT  WILL  BE  PRINTED | cr | I nl | 

PRINT  LAST  XX  —  THE  MOST  CURRENT  XX  MESSAGES  WILL  BE|cr||n-> 

U 

PRINTED | cr | | nil 

PRINT  LAST  XX  BY  PARTICIPANT  NAME  —  THE  MOST  CURRENT  XX|cr-> 

llnL|  ,  ,, 

MESSAGES  BY  THE  NAMED  PARTICIPANT  WILL  BE  PRINTED | cr | |-> 

nl| 

PRINT  NC;N...3  --  THE  SPECIFIED  MESSAGES  WILL  BE  PRINTED |cr-> 

1 1  nl  I 

THE  LIST  SHOULD  NOT  EXCEED  20  NUMBERS | cr | | nl | 

PRINT  N-X  —  MESSAGES  'N'  THROOUGH  *X'  WILL  BE  PRINTED  I cr | |-> 
nil 

PRINT  SUBJECT  KEYWORD  —  ALL  MESSAGES  WITH  A  SUBJECT  LlNE|c-> 

r  1 1  nl  | 

CONTAINING  THE  SPECIFIED  KEYWORD  WILL  BE  PRINTED | cr | | n-> 
l| 

PRINT  FLOOR  —  ALL  FLOOR  ACTIVITY  WILL  BE  PRINTED | cr | | nl | 
PRINT  FLOOR  FROM  HHMM  TO  HHMM  ON  DDMMYY  --  ALL  ACTIVITY | Cr | -> 

|nU 

RECORDED  DURING  THE  TIME  SPAN  ON  THE  SPECIFIED  DAY|cr|-> 

Ini  | 

WILL  BE  PRINTED! cr | |nl| 

PRINT  FLOOR  ON  DDMMMYY  --  ALL  FLOOR  ACTIVITY  RECORDED  ON|cr~> 

1 1  nl  | 

THE  SPECIFIED  DAY  WILL  BE  PRINTED | cr | | nl | 

PRINT  EVENTS  —  RECORDED  EVENTS  WILL  BE  PRINTED | cr | | nl | 

PRINT  MESSAGES  —  CONFERENCE  MESSAGES  WILL  BE  PRINTED | cr I | n-> 

l|  |  cr  1 1  nl  | 

TO  DIRECT  THE  OUTPUT  TO  A  REMOTE  PRINTER  THE  PHRASE  'ON  ID'  WOULD | cr I -> 
I  n  1 1 

FOLLOW  THE  REQUEST.  'ID*  WOULD  BE  A  VALID  RMOTE  PRINTER  I cr I  I nl | 
DESIGNATOR. | cr | | nil |cr| |nl| 

EXAMPLE  1 j cr I | nil 

COMMANDTPRINT  ALL  ON  AA| cr | | nl | | cr| | nl | 

EXAMPLE  2 | cr I | nil 

C0MMAND7PRINT  FLOOR  ON  260CT80 | cr I | nl | 

| cr | | nl I  COMMAND  ?* 

T12780  | cr 1 | nl | THIS  VERB  DISCONNECTS  A  PARTICIPANT  FROM  THE  CONFERENCE  PR0GR-> 

AM.jcrl | nil |cr| I  nil 

EXAMPLE | cr | | nil 
COMMAND ?QU IT | cr | |nl| 


A  -  lOi 


|cr | | nl| COMMAND  ?" 


T1279Q 


T12800 


T12810 


| cr | | nL | THIS  VERB  ALLOWS  A  SELECTIVE  REVIEW  OF  CONFERENCE  MESSAGES  AN-> 
D|cr| | nl | 

FLOOR  ACTIVITY.  SELECTIVITY  IS  PROVIDED  BY  THE  ARGUMENTS  THAT | cr | | nl-> 

I 

ACCOMPANY  THE  VERB.  THESE  INCLUDE | cr | | nl | 

REVIEW  ALL  —  ALL  PREVIOUS  MESSAGES  WILL  BE  REVIEWED . | cr | | n-> 

U 

REVIEW  ALL  BY  PARTICIPANT  NAME  —  ALL  MESSAGES  BY  THE|cr||n-> 
L| 

NAMED  INDIVIDUAL  WILL  BE  REVIEWED. | cr | | nl | 

REVIEW  LAST  XX  —  THE  MOST  CURRENT  XX  MESSAGES  WILL | cr | | nl | 

BE  REVIEWED. | cr | |nl| 

REVIEW  LAST  XX  BY  PARTICIPANT  NAME  —  THE  MOST  CURRENT | cr | |-> 

nil 

XX  MESSAGES  8Y  THE  NAMED  INDIVIDUAL  WILL  BE|cr||nl| 
REVIEWED. I cr | |nl| 

REVIEW  NC;N...D  —  THE  SPECIFIED  MESSAGES  WILL  BE|cr||nl| 

REVIEWED.  THE  LIST  CANNOT  EXCEED  20  VALID  MESSAGE | cr |-> 

|nl  | 

NUMBERS. | cr | |nl| 

REVIEW  N-X  —  MESSAGES  *N'  THROUGH  'X'  WILL  BE  DISPLAYED | cr-> 

Unit 

REVIEW  SUBJECT  —  THE  LIST  OF  AVAILABLE  SUBJECTS  FOR|cr||nl-> 

TALK  MESSAGES  WILL  BE  DISPLAYED. | cr I | nl | 

REVIEW  SU8JECT  KEYWORD  —  ALL  MESSAGES  CONTAINING  THE|cr||n-> 

U 

SPECIFIED  KEYWORD  WILL  BE  LISTED. | cr| |nl | 

REVIEW  FLOOR  --  ALL  RECORDED  FLOOR  ACTIVITY  WILL  BE|cr||nl| 
REVIEWED. | cr | |nl| 

REVIEW  FLOOR  FROM  HHMM  TO  HHMM  —  ALL  FLOOR  ACTIVITY | cr | | n l-> 

I 

RECORDED  DURING  THE  GIVEN  TIME  SPAN  WILL  BE  REVIEWED. |-> 

cr | | nl | 

I cr | | nl| COMMAND  ?* 

| cr | | nl | THIS  VERB  PRODUCES  A  REPORT  OF  THE  CURRENT  CONFERENCE  STATUS. -> 
THE | cr | | nl | 

DISPLAY  INCLUDES  CONFERENCE  NAME,  START  TIME  AND  DATE,  CURRENT | cr | | nl-> 

I 

CHAIRMAN'S  NAME,  HOST  NAME,  WHETHER  THE  FLOOR  IS  OCCUPIED,  AND  A|cr||-> 

nil 

LIST  OF  ACTIVE  PARTICIPANTS  AND  THEIR  MODE .  | cr | | nl | | cr I | nl | 

EXAMPLE | cr | |nl| 

C0MMAND7STATUS j  cr| |nl| 

I cr | | nil  COMMAND  ?“ 

| cr | | nl| THIS  VERB  TRANSFERS  A  PARTICIPANT  FROM  COMMAND  MODE  TO  TALK  M-> 


1 


ODE. | cr | |nt| 

TALK  MODE  IS  THE  STATE  IN  WHICH  A  PARTICIPANT  CAN  BUILD  MESSAGES |cr | |-> 
nil 

TO  BE  DELIVERED  TO  OTHER  CONFERENCE  PARTICIPANTS. | cp | |nl| | cr| | nil 
EXAMPLE | cr | | nil 
COMMAND  ?  T  ALK | c  r | |nt| 

| cr 1 1 nil  COMMAND  ?* 

T12820  | cr | | nl | THIS  VERB'S  USAGE  IS  RESTRICTED  TO  THE  CHAIRMAN  AND  ALLOWS  HI-> 

M  TO | cr | | nl | 

TERMINATE  A  CONFERENCE  SESSION.  A  TERMINATED  CONFERENCE  CAN  NOT  BE|c-> 
r| | nl | 

RECONVENED.  TERMINATION  WILL  NOT  TAKE  PLACE  IF  THERE  ARE  ACTIVE | cr | |-> 
nil 

PARTICIPANTS  OTHER  THAN  THE  CHAIRMAN  STILL  CONNECTED  TO  THE  I cr | | nl | 
CONFERENCE.  NO  PARTICIPANTS  ARE  PERMITTED  TO  JOIN  THE  CONFERENCE|cr|-> 
Ini! 

ONCE  A  TERMINATE  REQUEST  IS  ENTERED. | cr | | nl | | cr | | nl | 

EXAMPLE | cr | | nil 
COMMAND7TERMINATE | cr | |nl| 

I cr 1 1 nil  COMMAND  ?* 

T12830  | cr | | nl | THE  QUESTION  MARK  IS  USED  TO  OBTAIN  AN  EXPLANATION  OF  THE  MOD-> 

E I  c  r  1 1  n  1 1 

THE  PARTICIPANT  IS  IN.  IT  WORKS  FROM  COMMAND  AND  TALK  MODES .  | cr | | nl |-> 
I cr | | nl | 

EXAMPLE | cr | |nl| 

COMMAND?? | cr | | nil 
Icr | | nil  COMMAND  ?* 

T13000  | cr 1 1 nil |ff 1 1 cr | | nil  TALK  MODE  ENTERED  IN  * 

T13010  | cr | | nl | >“ 

T13011  | cr | |nl|-“ 

T13012  | cr | | nl 1 TO?“ 

T13013  |cr | | nil  FROM?* 

T130K  |cr  1 1  nil  SUBJECT?* 

T13015  |cr 1 1 nil  CLASS?* 

T13016  | cr | | nl | INFO?* 

T13017  | cr | | nl | REF?“ 

T13050  Sdesc* 


4 


)/ 

t 
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T13051  Scornin' 


T13052  Sdele' 
T13053  Send' 
T13054  Slist' 
T13055  Ssele' 
T13056  Ssubj' 
T13057  Stalk' 


T13058  ?  |  c.  J 


T13100 

1  cr  | 

1 

1  nl  | 
cr|  | 

Iffl 

nil' 

1  cr  | 

|  nl  |  »>$DESCRIBE«< 

-> 

T13101 

l  cr  l 

l  nl  | 

Iffl 

Icr  | 

|  nl  |  >»SC0MMAND«< 

1  cr  | 

1  nl  |  “ 

T13102 

1  cr  | 

1  nl  | 

Iffl 

1  cr  | 

|  nil  »>SDELETE«< 

1  cr  | 

1  nl  |  “ 

T13103 

1  cr  | 

1  nl  | 

Iffl 

1  cr  1 

|nl|»>S£ND«< 

1  cr  | 

1  nl  |  ' 

T13104 

1  cr  | 

1  nl  | 

Iffl 

I  cr  | 

|  n  1 1  »>SLIST  <« 

1 cr | | nl | 

m 

T13105 

1  cr  | 

|nl| 

Iffl 

1  cr  | 

I  n  1 1  »>$SELE  CT  « |  c  r 

1 1  n  L  |  ' 

T13106 

1  cr  | 

1  nl  | 

Iffl 

1  cr  | 

|  nl  |  »>SSUBJECT«< 

1  cr 1 1 nl  | 

* 

T13107 

1  cr  | 

1  nl  | 

Iffl 

1  cr  | 

| nl |  »>$TALK«<  |  cr 

1  1  nl  |  “ 

T13108 

1  cr  1 

1  nl  1 

Iffl 

1  cr  | 

|  n  1 1  >»  ?  « 

1  cr 

|nll‘ 

T13109 

1  cr  1 

1  n  1 1 

Iffl 

1  cr  | 

|  nl  |  >»SINSERT«< 

Icr | | nl  | 

A 

T13099 

1  cr  1 

1  nl  | 

INVALID 

DESCRIBE  ARGUMENT  PASSED' 

T13110 

1  cr  | 
LE 

1  nl  | 

1 

THIS 
cr  1 1 

PARAMETER  IS  USED  TO  OBTAIN  AN 
nil 

EXPLANATION  OF  THE  POSSIB-> 

TALK  MODE  VERBS.  THE  AVAILABLE  VERBS  ARE  | cr | |nl | | cr | | nl | 

SCOMMAND  SDELETE  SDESCRIBE  SEND  SINSERT  |-> 

CP | | n  L | 

SLIST  SSELECT  SSUBJECT  STALK  ?  |cr||-> 

nlj | cr | | nl | 

THE  PARAMETER  TO  BE  EXPLAINED  WOULD  FOLLOW  SDESCRIBE.  I cr | | nl | | cr | |-> 

nil 

EXAMPLE  | c  r | | n 1 1 

>SDESCRIBE  SEND  |cr| | nl | ' 
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T13120 

T13130 

T13140 

T13150 

T13160 

T13170 


I cr | I  nil  THIS  PARAMETER  WILL  CAUSE  A  MESSAGE  BEING  BUILT  TO  BE  ACCEPTED 
0  AS  | cr | | nl| 

COMPLETE  AND  QUEUED  FOR  TRANSMISSION.  THE  PARTICIPANT  WILL  THEN  BE  |-> 
cr | | nl | 

TRANSFERRED  TO  COMMAND  MODE.  | cr | |nl | | cr | |nl|“ 

| cr I | nl| THIS  PARAMETER  WILL  CAUSE  THE  MESSAGE  BEING  ENTERED  TO  BE  >> 
I cr I | nl | 

DELETED  AND  THE  TERMINAL  TRANSFERRED  TO  LISTEN  MODE. | cr | | nl | ‘ 

I cr I | nl| THIS  PARAMETER  WILL  CAUSE  A  MESSAGE  BEING  BUILT  TO  BE  ACCEPTED 

D  I cr | | nil 

AS  COMPLETE  AND  QUEUED  FOR  TRANSMISSION.  THE  MESSAGE  WILL  BE  |cr||-> 
nil 

ASSIGNED  A  NUMMBER  AND  STAMPED  WITH  THE  AUTHOR'S  NAME  AND  THE  TIME  -> 
I  cr | | n 1 1 

AND  DATE.  THE  PARTICIPANT  WILL  THEN  BE  TRANSFERRED  TO  LISTEN  MODE.  |-> 
cr | | nl j | cr | | nl | 

(NOTE:  NULL  INPUT(CARRIAGE  RETURN)  FROM  A  TERMINAL  WILL  SERVE  THE  |-> 
cr | 1 nl | 

SAME  PURPOSE.  | cr | | nl | “ 

I cr I |nl|$LIST  AS  THE  FIRST  CHARACTERS  OF  INPUT  WILL  CAUSE  THE  ENTIRE  -> 
MESSAGE | cr | |nl| 

BEING  BUILT,  OR  THE  LAST  SEVERAL  LINES  ENTERED  IF  THE  SLIST  IS  |-> 

cr | | nl | 

FOLLOWIND  BY  A  NUMBER,  TO  BE  LISTED. | cr | | nl | | cr | | nl | 

EXAMPLE  | cr | | nl| 

>SLIST  10  | c r | | n 1 1 “ 

I cr I | n l | THIS  VERB  ALLOWS  A  PARTICIPANT  TO  DIRECT  HIS  MESSAGE  TO  UP  TO-> 
FOUR  j cr | | nl| 

SPECIFIED  RECIPIENTS.  IF  SSELECT  IS  NOT  SPECIFIED  THE  MESSAGE  IS  |-> 
cr | | nl | 

DELIVERED  TO  ALL  ACTIVE  PARTICIPANTS | cr | | nl | | cr | | nl | 

EXAMPLE  | cr | | nl| 

>SSELECT  PARTICIPANT1  PARTICIPANTS  PARTICIPANTS  |cr||nl||-> 

cr| |nl|" 

I cr | | nl | THIS  VER8  ALLOWS  A  PARTICIPANT  TO  ASSIGN  A  SUBJECT  LINE  TO  A|-> 
cr | I n l | 

MESSAGE.  THE  LINE  SHOULD  CONTAIN  A  WORD  THAT  IS  IN  THE  SUBJECT  |cr||-> 
nil 

LIST  CREATED  BY  THE  CONFERENCE  CHAIRMAN  IF  THE  MESSAGE  IS  TO  BE  |cr||-> 
nil 

REVIEWED  BY  SUBJECT,  OTHERWISE  NOT  REQUIRED. | cr | | nl | | cr | | nl | 

EXAMPLE  I cr | | nil 

>SSUBJECT  LANTCOM  MANPOWER  RESOURCES  I cr | | nl | | cr I | nl |* 


T13180  | cr | |nl| THIS  PARAMETER  WILL  CAUSE  A  MESSAGE  BEING  BUILT  TO  BE  ACCEPTED 


D  AS  | cr | |nl| 

COMPLETE  AND  QUEUED  FOR  TRANSMISSION.  THE  PARTICIPANT  WILL  REMAIN |-> 
cr|  |nU 

IN  TALK  MODE/  AND  BE  PROMPTED  TO  START  ANOTHER  MESSAGE.  |cr| |nl| | cr| |-> 
nil 

EXAMPLE  | cr I | nl| 

>$TALK |cr | |nl|* 


T13190  | cr | | nl| THE  QUESTION  MARK  IS  USED  TO  FIND  OUT  THE  CURRENT  MODE.  BESID-> 

ES  | cr | | n 1 | 

STATING  THE  MODE/  IT  GIVES  A  BRIEF  DESCRIPTION  OF  THE  MODE'S  |-> 

cr| | nil 

FUNCTION. 


T13200  | cr | | n l | THIS  PARAMETER  ALLOWS  PREVIOUSLY  CREATED  FILES  TO  BE  INSERTED-> 

INTO  A j  cr | | n 1 1 

MESSAGE.  THE  FILE  MUST  BE  IN  STANDARD  FORMAT  WITH  TIMESHARING  |cr||-> 
nil 

ASCII  MEDIA  CODE  6.  THE  LOGICAL  RECORD  SIZE  SHOULD  BE  80  CHARACTERS |-> 
cr I | n l | 

OR  LESS.  THE  FULL  NAME  OF  THE  FILE  TO  BE  INSERTED  MUST  FOLLOW  THE  |-> 
cr  1 1  n  1 1 

PARAMETER.  THE  ACTUAL  NUMBER  OF  LINES  THAT  WILL  BE  ACCEPTED  IS  SET  |-> 
cr| | nl | 

BY  THE  CHAIRMAN.  THIS  PARAMETER  MAY  ALSO  BE  USED  TO  INSERT  A  |cr||-> 
nil 

PREVIOUS  MESSAGE  INTO  THE  ONE  BEING  BUILT.  THIS  IS  DONE  BY  NOT  FOL-|-> 
cr| | nil 

LOWING  THE  REQUEST  WITH  A  FILE  NAME.  A  PROMPT  WILL  FOLLOW  FOR  THE  |-> 
cr | | nl | 

NUMBER  OF  THE  MESSAGE  TO  BE  INSERTED.  | cr| | nl | | cr | | nl | | cr | | nl | 

EXAMPLE  I cr || nl| 

>$INSERT  UMC/CATA/FILE  |cr||nir 


T13210  |cr| |nl| |ff | |cr| |nl|THIS  TERMINAL  IS  CURRENTLY  IN  TALK  MODE.  -> 

I cr | j  nl | j  cr | j  nl | 

THE  FUNCTION  OF  TALK  MODE  IS  THE  ENTERING  OF  MESSAGES  FOR  OTHER  | -> 
cr | | nil 

PARTICIPANTS  ON  THE  CONFERENCE.  A  MESSAGE  MAY  HAVE  A  SUBJECT  |cr||-> 
nil 

ASSIGNED  TO  IT/  HAVE  A  PREEXISTING  FILE  INCLUDED  IN  IT/  OR  HAVE  A  |-> 
cr l | nl |  ; 

PREVIOUS  TALK  MESSAGE  INCLUDED  IN  IT.  THE  TALK  MODE  FUNCTIONS  ARE  |->  • 

cr | | nl | 

CONTROLLED  BY  THE  FOLLOWING  VERBS  | cr | | nl | | cr | | nl | 

SCOMMAND  SDELETE  (DESCRIBE  SEND  (INSERT  |-> 

cr  1 1 nl 1 

(LIST  (SELECT  (SUBJECT  (TALK  ?  |cr||-> 

nl ||cr | | nil  * 

AN  EXPLANTION  OF  EACH  PARAMETER  IS  OBTAINED  BY  USING  THE  | C->  ' 
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i 


I 


r I |nl | 

PARAMETER  'SDESCRIBE'  FOLLOWED  BY  THE  VERB  TO  BE  EXPLAINED.  |cr||nl||-> 
cr| | nil 

EXAMPLE  l cr | | nL| 

>SDESCRIBE  SINSERT  | cr | | nl | | cr | | nl | | -> 

cr| | nl | 

THE  EXIT  FROM  TALK  UPON  COMPLETION  OF  A  MESSAGE  IS  CONTROLLED  BY  THE|-> 
cr| | nil 

USER.  CONTROL  IS  BASED  ON  THE  TALK  MODE  VERB  USED  TO  END  THE  MESSA-> 
GE.  |cr||nl|“ 

T13300  1 cr | | nl | MESSAGE  DELETED  BY  PARTICIPANT  * 

T13320  | cr | | nl | MESSAGE  ACCEPTED* 

T13340  | cr | | nl| NO  TEXT  HAS  BEEN  ENTERED* 

T13360  | cr | | nl| ILLEGAL  SELECT  REQUEST  DUE  TO— NO  PARTICIPANT  NAMES | cr | | nl | * 

T13380  |cr| |nl|-“ 


T13381  |  cr  |  |  nl|  INVALID  SUBJECT  REQUEST— NO  SUBJECT  LINE  |cr||nl|>* 

T13420  |cr | |nl|MESSAGE  NUMBER  * 

T13430  | cr | | nl| |ff | | cr | | nl| CONTINUING  IN  TALK  MODE  “ 
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APPENDIX  B 


ENVIRONMENT  MANAGER  PROCESS  (EMP)  USER  INTERFACE 


The  Environnent  Manager  Process  (EMP)  allows  FSM  personnel,  the  Environ¬ 
ment  Manager  (EM),  to  monitor  and  change  the  FSM  operating  environment. 
The  EM  can  observe  a  user's  current  status,  reassign  users  to  Screeners, 
and  change  FSM  screen  modes  and  bandwidth  thresholds.  The  EM  initiates 
EMP  by  logging  on  as  a  normal  UNIX  user.  After  logging  on,  the  EM  is 
initially  presented  with  a  help  message  informing  him  of  the  available 
commands.  The  EMP  then  signifies  that  it  is  ready  to  accept  commands  by 
printing  a  on  the  terminal. 

EMP  provides  the  EM  with  seven  commands.  These  commands  allow  the  EM  to 
make  all  necessary  changes  in  the  FSM  environment.  The  commands  are: 

1.  ASSIGNMENTS  -  Display  a  list  of  current  logged  on  users  and 
Screeners  and  the  assignments  of  each. 

2.  DISPLAY  -  Display  detailed  user/ system  information. 

i.  HELP  -  Display  a  list  of  commands  or  detailed  information 

about  a  specific  command. 

4.  HISTORY  -  invoke  the  AT DP  program  to  view  previous  FSM 


events 


5.  MODIFY  -  Change  the  current  FSM  operating  environment. 

6.  PROFILE  -  Display  the  current  status  of  logged  on  users. 

7.  QUIT  -  Terminate  EMP  and  log  off  UNIX. 

Descriptions  of  each  command  follow,  including  examples  and  syntax. 
Also,  the  syntax  for  the  complete  set  of  EMP  commands  is  provided  in 
Appendix  A. 

0.1  ASSIGNMENTS 

The  ASSIGNMENTS  command  provides  the  EM  with  a  list  of  all  current 
user/Screener  assignments.  It  displays  all  current  users  and  Screeners 
logged  on,  showing  which  Screener  is  assigned  to  which  user.  If  a  user 
currently  has  no  Screener,  ASSIGNMENTS  displays  "No  Screener"  for  that 
user.  If  a  Screener  currently  has  no  users,  ASSIGNMENTS  displays  "-  none 
assigned  -"  for  that  Screener.  The  command  syntax  is: 
aCssignments]  <nl> 

where  the  letters  enclosed  in  brackets  "C3"  are  optional  and  <nl> 
represents  a  newline  or  carriage  return.  ASSIGNMENTS  returns  to  the  com¬ 
mand  level  prompt  ("*">  after  displaying  the  user/Screener  assignments. 


Following  is  an  example  of  the  output  from  the  ASSIGNMENTS  command. 
CURRENT  FSM  USER/SCREENER  ASSIGNMENTS  Mon  Sep  IS  14:56:28  1980 


Screener 

User 

mees 

af3gwbrglre 

atlas 

-  none  assigned  - 

mees 

af3gwbrgmes 

jones 

af9gwglmrmb 

jones 

af3gwbrgslw 

B.2  DISPLAY 

The  DISPLAY  command  gives  the  EM  a  detailed  description  of  current  FSM 
system  state  as  well  as  the  current  states  of  any  Logged  on  users.  At 
the  system  level,  DISPLAY  produces  the  current  bandwidth  rate,  the 
screening  status  for  each  WWMCCS  subsystem,  the  number  of  Screeners 
currently  logged  on,  and  the  number  of  users  currently  logged  on.  At  the 
user  level,  the  DISPLAY  command  gives  the  user  identification,  the  user's 
current  terminal,  the  assigned  Screener,  the  current  bandwidth  rate,  and 
the  screening  status  for  each  WWMCCS  subsystem.  The  syntax  for  this  com¬ 
mand  is: 

dCisplayJ  C<userlist>3  <nl> 

<userlist>  :=  <user>  I  <user>  <userlist> 

<user>  :*  system  I  <username> 

<username>  :=  a  valid  logged  on  WWMCCS  user  name 
<nl>  :=  a  newline  or  carriage  return 

Arguments  enclosed  in  brackets  "C3"  are  optional.  DISPLAY  returns  to  the 
command  prompt  <"*")  after  displaying  the  requested  information.  A 


maximum  of  five  arguments  to  the  DISPLAY  command  is  allowed. 

The  DISPLAY  command  with  no  arguments  causes  reports  on  the  system  and 
all  logged  on  users  to  appear.  For  example: 
dis  <nl> 

might  cause  EMP  to  display: 

CURRENT  FSM  ENVIRONMENT  VALUES  Mon  Sep  22  09:51:54  1980 


System-wide  : 

Bandwidth  is  10  messages/minute 
Subsytem  screening  status: 
ACCESS  is  normal 
LIST  i s  norma l 
SIOS  is  normal 
TCON  is  normal 
TLCF  is  normal 
TSS  i s  norma l 
wwDMS  is  normal 
Screeners  logged  on  -  1 
Users  logged  on  -  1 


User: 

Username  -  af3gwbrgmes 
Terminal  -  7 

Screener  assigned  -  erickson 
Bandwidth  is  5  messages/minute 
Subsystem  screening  status: 


ACCESS 

LIST 

SIOS 

TCON 

TLCF 


s  normal 
s  none 
s  normal 
s  none 
s  normal 


TSS  is  all 
WWDMS  is  normal 

Had  the  EM  input: 


d  sys  <nl> 


EMP  would  have  displayed  only  the  system  portion  of  the  above  display. 
Alternatively,  the  EM  could  have  asked  for  information  on  users.  For 
example,  if  the  EM  inputs: 


di  af3gwbrgjdm  af8gwglmrmb  af3gwglmjtc  <nl> 


EMP  would  output: 

CURRENT  FSM  ENVIRONMENT  VALUES  Mon  Sep  22  09:51:54  1980 


User: 


Username  -  af3gwbrgjdm 
Terminal  -  k 


Screener  assigned  -  jones 
Bandwidth  is  10  messages/minute 
Subsystem  screening  status: 


ACCESS  is  none 


LIST 

SIOS 

TCON 

TLCF 

TSS 

WWDMS 


is  none 
is  normal 
is  normal 
is  all 
is  none 
is  normal 


User 


User 


Username  -  af8gwglmrmb 
Terminal  -  1 


Screener  assigned  -  jones 
Bandwidth  is  1  messages/minute 
Subsystem  screening  status: 


ACCESS  is  none 


LIST 

SIOS 

TCON 

TLCF 

TSS 

WWDMS 


is  none 
is  none 
is  none 
is  none 
is  none 
is  none 


Username  -  af3gwglmjtc 
Terminal  -  j 

Screener  assigned  -  jones 
Bandwidth  is  25  messages/minute 
Subsystem  screening  status: 


ACCESS  is  none 


LIST 

SIOS 

TCON 

TLCF 

TSS 

WWDMS 


is  all 
is  normal 
is  none 
is  none 
is  all 
is  normal 


Finally,  the  EM  could  have  asked  for  users  and  system  information,  as  in 
the  example: 

dis  af3gwbrgrmb  system  af9gwglmslw  <nl> 

which  would  result  in  a  display  of  the  system  information,  af3gwbrgrmb's 
information,  and  finally  the  information  on  af9gwglmslw. 


If  the  EM  enters  an  invalid  user  name  (not  defined  to  FSM  or  not 
currently  logged  on)  EMP  outputs  an  appropriate  message  and  reprompts  for 
the  information. 


B.3  HELP 


The  HELP  command  displays  information  about  all  or  each  EMP  command.  The 
command  syntax  is: 


heClp3  C<command-name-list>]  <nl> 


<command-name- 1 i s  t  > 
<command-name> 

<nl> 


:=  <command-name>  I 

<command-n  ame  ><  command-name- 1  i  s  t  > 
:=  assignments  |  display  I  help  I 
history  |  modify  |  profile  |  quit 
:=  newline  or  return  key 


Syntax  is  shown  in  a  modified  BNF  format.  Optional  arguments  are  shown  in 
brackets  "C3",  and  terminal  tokens  are  shown  between  the  characters  "<>". 
The  bar  character  "I"  separates  options. 


The  HELP  command  displays  general  information  on  all  commands  or  the  syn¬ 
tax  for  one  or  more  specific  commands.  If  the  EM  entered: 


h  <nl> 


EMP  would  display: 


This  is  a  brief  list  of  EMP  commands.  To  get  further  information  on  a 

specific  command,  enter  "help  <command-name>"  where  the  valid  command 

names  are  "assignments,  display,  help,  history,  modify,  profile,  quit". 

ASSIGNMENTS  -  List  current  user/Screener  assignments. 

DISPLAY  -  Display  current  screening  and  bandwidth  data  for 
system  and  all  logged  on  users  or  specified 
data  only. 

HELP  -  Display  this  list  of  commands  or  information  about 

one  or  more  specified  commands. 

HISTORY  -  Call  the  Audit  Trail  Display  Program  to  display 
audit  data. 

MODIFY  -  Modify  specified  system  or  user  data. 

PROFILE  -  Display  current  profile  data  for  all  or  specified 

users. 

QUIT  -  Terminate  the  Environment  Manager's  Program. 


In  another  example,  if  the  EM  entered: 


help  display  modify  <nl> 


EM  would  output: 


DISPLAY  -  Display  current  screening  and  bandwidth  data  for 
system  and  all  logged  on  users  or  specified  data 
only. 


Syntax  is  shown  in  a  modified  8NF  format.  Optional  arguments  are  shown  in 
brakets  "CJ",  and  terminal  tokens  are  shown  between  the  characters  "<>". 
The  bar  character  "|"  separates  options. 


<disp-arg-list>  :=  system  |  <user-name-list>  |  system  <user-name-list> 
<user-name-List>  :=  <user-name>  |  <user-name>  <user-name-list> 
<user-name>  :=  <valid  user  name  known  to  FSM  (WES  user) 

Where  only  five  arguments  are  allowed. 

<nl>  :=  newline  or  return  key 

MODIFY  -  Modify  specified  system  or  user  data. 


Syntax  is  shown  in  a  modified  BNF  format.  Optional  arguments  are  shown  in 
brakets  and  terminal  tokens  are  shown  between  the  characters  "<>". 
The  bar  character  "|"  separates  options. 


Syntax: 

modify  C<modify-arg>]  <nl> 

where  a  menu  will  be  presented  with  the  various  choices 
if  no  arguments  are  specified. 


<modify-arg> 


: =  <mod“Screen-arg>  |  <mod-band-arg> 
<mod-sub-arg>  |  <mod-uscreen-arg> 
<mod“uband~arg>  |  <mod-usub-arg>  | 
<mod-assign-arg> 


<mod-s  c  r een-a  rg> 

<mod-band~arg> 

<mod-sub-arg> 

<mod-uscreen-arg> 

<mod-uband-arg> 

<mod-usub-arg> 

<mod-assign-arg> 


:=  screen  <screen-mode> 

:=  bandwidth  <bandwidth-rate> 

:=  subsystem  <subsystem-name>  <screen-mode> 
:=  user  <user-name>  <screen-mode> 

:=  ubandwidth  <user-name>  <bandwidth-rate> 
:=  usubsystem  <user-name>  <subsystem-name> 
<screen-mode> 

:=  uassignments  <user-name>  <Screener-name> 


<screen-mode>  :=  all  |  normal  |  none  |  off 

where  none  and  off  mean  no  screening. 


<bandwidth-rate> 

<subsystem-name> 

<user~name> 

<Screener-name> 


=  digit  between  the  values  1  and  255  inclusively. 

=  tss  I  tlcf  I  wwdms  |  tcon  |  sios  |  access  |  list 
=  valid  user  name  known  to  FSM  (WES  user) 

=  valid  user  name  known  to  FSM  (Screener) 


:=  newline  or  return  key 


d  -  8 


8.4  HISTORY 


The  HISTORY  command  allows  the  EM  to  view  previous  FSM  events  that  were 
audited.  Its  invocation  activates  the  Audit  Trail  Display  Program  (ATDP) . 
AT DP  permits  the  display  of  any  and  all  audit  events.  The  syntax  of  the 
HISTORY  command  is: 
hiCstory]  <nl> 

where  the  letters  in  brackets  “C  are  optional,  and  <nl>  represents  a 
newline  or  carriage  return.  A  complete  description  of  the  options  availa¬ 
ble  for  ATDP  appears  in  Section  3.  Control  returns  to  EMP  when  the  EM  is 
finished  with  ATDP. 

B.5  MODIFY 

The  MODIFY  command  is  the  most  powerful  of  all  EMP  commands.  Through  it 
the  EM  can  modify  the  FSM  environment.  Environment  values  that  may  be 
modified  include: 

1.  system-wide  screening 

2.  system-wide  bandwidth  threshold 

3.  subsystem  screening 

4.  user  screening 


5. 


user  subsystem  screening 


6 


user  bandwidth  threshold 


7.  user/Screener  assignments 

Because  of  the  complexity  of  this  command,  two  forms  are  available.  The 
long  form  accepts  arguments  and  processes  one  MODIFY  command  at  a  time; 
it  can  be  used  by  an  EM  familiar  with  EMP.  The  other,  the  short  form, 
does  not  accept  arguments  and  prompts  the  user  for  the  necessary  informa¬ 
tion.  The  initial  prompt  is  a  menu  requesting  the  user  to  enter  the  num¬ 
ber  of  the  MODIFY  command  he/she  desires.  Further  prompts  are  specific 
questions.  This  form  of  the  MODIFY  command  continues  until  the  user 
specifically  exits  from  it. 

B.5.1  Short  Form  Modify  Command 

The  short  form  MODIFY  command  has  the  syntax: 
mCodifyD  <nl> 

where  the  letters  enclosed  in  brackets  "CD"  are  optional  and  <nl> 

represents  a  newline  or  carriage  return.  EMP  responds  with 

MODIFY  CURRENT  FSM  ENVIRONMENT  VALUES  Mon  Sept  15  15:36:45  1980 

Please  enter  the  character  which  corresponds  to  the  desired  action 

1  -  modify  system-wide  screening 

2  -  modify  system-wide  bandwidth 

3  -  modify  subsystem  screening 

4  -  modify  user  screening 

5  -  modify  user/subsystem  screening 

6  -  modify  user  bandwidth 

7  -  modify  user/Screener  assignments 
h  -  display  this  list  of  options 

q  or  <cr>  -  terminate  modifications 


The  EM  enters  the  character  at  the  "action?*'  prompt.  An  incorrect 


response,  "22"  for  example,  causes  EMP  to  output: 

"22"  is  an  invalid  argument  for  this  command. 

B.5.1.1  Short  Form  Modify  System-Wide  Screening.  If  the  EM  wants  to 
change  system-wide  screening  he  enters  "1<nl>"  in  response  to  the 
"action?"  menu  prompt.  EMP  responds  with: 

MODIFY  System-Wide  Screening  Mon  Sep  15  15:37:21  1980 

Set  screening  to  all,  none,  or  normal  (q  or  <cr>  to  quit): 

The  EM  may  enter  "all",  "off",  "none"  or  "normal"  in  response  to  this 
prompt,  setting  system-wide  screening  to  all,  none  or  normal  respec¬ 
tively.  The  characters  "off"  may  be  used  at  any  time  a  screen  mode  is 
requested  and  means  the  same  as  "none".  The  EM  may  also  enter  any  part  of 
the  above  strings  as  long  as  enough  characters  are  provided  to  uniquely 
identify  it.  Entering  "nor"  for  example  causes  EMP  to  respond: 

Current  system-wide  screening  is  now  normal 
The  EM  may  also  hit  newline  or  return  in  response  to  the  above  prompt. 
In  this  case  EMP  says: 

System-wide  screening  not  changed 

Had  the  EM  entered  an  incorrect  response,  for  example  "nominal",  Emp 
indicates  this  fact  and  prompts  for  another  user  input: 

"nominal"  is  an  invalid  screen  mode.  Enter  replacement  or  <cr> 
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If  the  EM  enters  an  ambiguous  screen  mode/  "no"  for  example/  EMP  says: 
Input  no  is  ambiguous.  Enter  replacement  or  <cr> 

8. 5. 1.2  Short  Form  System-Wide  Bandwidth.  To  change  the  system 
bandwidth  threshold  the  EM  enters  "2<nl>"  in  response  to  the  menu  prompt. 
EMP  will  then  output: 

MODIFY  System-wide  Bandwidth  Tue  Sep  16  11:21:45  1980 

Current  system-wide  bandwidth  is  10  messages/minute. 

Set  it  to  (1-255)  <q  or  <cr>  to  quit): 

The  EM  may  enter  any  integer  within  the  specified  range/  "5"  for  example/ 
and  EMP  will  output: 

Current  system-wide  bandwidth  is  now  5 
An  incorrect  entry/  "350"  for  example/  will  cause: 

"350"  i -  an  invalid  bandwidth  rate.  Enter  replacement  or  <cr> 

At  this  point  the  EM  may  enter  a  replacement  value  or  return.  If  a  return 
is  entered/  EMP  says: 

Bandwidth  not  changed 
and  returns  to  the  menu  prompt  display. 

B.5.1.3  Short  Form  Modify  Subsystem  Screening.  Entry  of  "3"  followed  by 
<nl>  at  the  menu  prompt  causes  EMP  to  output: 

MODIFY  Subsystem  Screening  Tue  Sep  16  11:32:36  1980 

Subsystem  Screening  Status: 
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ACCESS  is  normal 
LIST  is  none 
SIOS  is  all 
TCON  is  normal 
TLCF  is  none 
TSS  is  normal 
WWDMS  is  normal 

Enter  the  next  subsystem  name  (q  or  <cr>  to  quit): 

The  EM  may  then  enter  any  subsystem  name  (with  enough  characters  to  uni¬ 
quely  identify  it).  Entering  q  or  <cr>  causes  EMP  to  return  to  the  menu 
prompt.  If  the  user  enters  "w"  followed  by  <nl>  (he  wants  to  modify  the 
screen  mode  for  WWDMS) ,  EMP  responds  with: 

Set  screening  to  all,  none  or  normal  (q  or  <cr>  to  quit): 

If  Em  enters  "a"  followed  by  <nl>  in  response  to  this  query,  EMP  outputs 

Screening  for  WWDMS  is  now  all 

EMP  then  reprompts  for  another  subsystem  name. 

* 

The  entry  of  an  invalid  or  ambiguous  system  name  or  screen  mode  causes 
EMP  to  issue  an  appropriate  message  and  reprompt  for  the  information. 

B.5.1.4  Short  Form  Modify  User  Screening.  A  "4”  response  followed  by 
<nl>  will  cause  EMP  to  enter  the  MODIFY  user  screening  subcommand  and 
output 

MODIFY  User  Screening  Tue  Sep  16  11:40:29  1980 

Enter  the  next  user  name  whose  overall  screen  mode  you  wish  to  modify 

<q  or  <cr>  to  quit): 

EM  then  enters  a  user  name,  "af8gwbrgjdm"  for  example.  EMP  then  asks  for 
the  screen  mode: 

Set  screening  to  all,  none  or  normal  (q  or  <cr>  to  quit): 


A  correct  response  (enough  characters  to  identify  the  string  as  one  of 
"all”,  "none"  or  "normal"),  "non"  for  example,  causes  EMP  to  display: 

Current  screening  for  af8gwbrqjdm  is  none 
EMP  then  reprompts  for  another  user  name.  The  characters  "all"  may  be 
input  to  change  the  screen  modes  for  all  currently  logged  on  users. 

The  entry  of  an  invalid  username  (unknown  to  FSM  or  not  currently 
logged-on)  causes  a  reprompt.  An  invalid  or  ambiguous  screen  mode  causes 
an  appropriate  message  and  a  reprompt. 

B.5.1.5  Short  Form  Modify  User  Subsystem  Screening.  If  the  EM  enters 
"5"  followed  by  <nl>  in  response  to  the  menu  prompt,  he/ she  can  then 
change  the  screen  modes  of  specified  users  for  specified  subsystems.  EMP 
prompts  with: 

MODIFY  User/Subsystem  Screening  Tue  Sep  16  13:18:36  1980 

Enter  the  next  user  name  whose  subsystem  screen  mode  you  wish  to  modify 
(q  or  <cr>  to  quit): 

The  EM  then  enters  a  valid  user  name,  "af8gwbrqlre"  for  example.  EMP 
then  prompts  for  subsystem: 

Enter  the  next  subsystem  name  (q  or  <cr>  to  quit): 

A  valid  unique  subsystem  entry  (enough  characters  to  identify  the  string 
as  one  of  "all",  "access",  "list",  "sios",  "tcon",  "tlcf",  "tss"  or 
"wwdms"),  "tl"  for  example,  causes  EMP  to  output: 

Set  screening  to  all,  none  or  normal  (q  or  <cr>  to  quit): 

A  correct  response  (enough  characters  to  identify  the  string  as  one  of 
"all",  "none"  or  "normal"),  "a"  for  example,  causes: 


* 


Please  enter  the  character  which  corresponds  to  the  desired  action 

1  -  modify  system-wide  screening 

2  -  modify  system-wide  bandwidth 

3  -  modify  subsystem  screening 

4  -  modify  user  screening 

5  -  modify  user/subsystem  screening 

6  -  modify  user  bandwidth 

7  -  modify  user/Screener  assignments 
h  -  display  this  list  of  options 

q  or  <cr>  -  terminate  modifications 

action? 

During  normal  operation,  the  EMP  will  continue  to  output  data  to  the 
screen  until  it  is  full,  and  then  request  the  EM  to  hit  a  newline  key  to 
get  the  next  screen.  The  above  options  will  be  repeated  each  time  the 
screen  is  cleared. 


B.5.2  Long  Form  Modify  Commands 


The  following  sections  describe  each  long  form  MODIFY  command  in  detail. 
In  contrast  to  the  short  form,  long  form  MODIFY  commands  do  onLy  the 
action  specified.  Repeat  MODIFY  commands  are  not  allowed  in  the  long 
form. 


8. 5. 2.1  Long  Form  Modify  System-Wide  Screening.  This  subcommand  changes 
the  value  of  the  system  screen  mode.  Its  effect  is  to  change  the  screen 
mode  for  all  subsystems  as  well  as  the  screen  modes  for  all  logged  on 
user's  subsystems  (and  all  users  who  subsequently  log  on  to  FSM).  The 
syntax  for  this  command  is 

mCodify]  scCcreenJ  <mode>  <nl> 

<mode>  :=  aClU  I  nonCe]  I  norCmaU  I  oCffJ 
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<nl>  :=  return  or  newline  key 
Arguments  enclosed  in  brackets  "C  3"  are  optional. 

For  example/ 

m  scr  none  <nl> 

would  change  the  value  of  the  screen  mode  of  atl  subsystems  for  all  log¬ 
ged  on  users  so  that  no  screening  would  occur.  It  would  result  in  the 
message: 

Current  system-wide  screening  is  now  none 
Had  the  EM  entered  "screen"  incorrectly/  EMP  would  output  an  appropriate 
message  and  return  to  the  command  level  prompt.  Had  the  EM  entered  an 
incorrect  or  ambiguous  screen  mode/  EMP  would  output  an  appropriate  mes¬ 
sage  and  reprompt. 

B.5.2.2  Long  Form  Modify  System-Wide  Bandwidth  Threshold.  This  subcom¬ 
mand  changes  the  value  of  the  system  bandwidth  threshold.  Its  effect  is 
to  change  the  threshold  value  for  all  users  currently  logged  on  to  FSM 
(and  all  users  who  subsequently  log  on).  The  syntax  for  this  command  is: 
mCodifyJ  bCandwidthJ  <rate>  <nl> 

<rate>  :=  positive  integer  between  1  and  255  inclusive. 

<nl>  :=  return  or  newline  key 
Arguments  enclosed  in  brackets  "C  3"  are  optional. 

If  the  EM  enters 

mod  b  10  <nl> 

for  example/  the  command  would  result  in  changing  the  current  system-wide 
bandwidth  threshold  to  10  and  would  output: 

Current  system-wide  bandwidth  is  now  10 


If  the  EM  had  entered  an  out-of-range  bandwidth  EMP  would  output  an 
appropriate  message  and  reprompt  for  another  bandwidth  value. 


B.5.2.3  Long  Form  Modify  Subsystem  Screening.  This  subcommand  changes 
individual  subsystem  screen  modes.  Its  effect  is  to  change  the  indivi¬ 
dual  subsystem  screen  mode  for  all  users  currently  logged  onto  FSM  (and 
all  users  who  subsequently  log  on).  The  syntax  for  this  command  is: 
mCodifyJ  suCbsystemJ  <subname>  <mode>  <nl> 

<subname>  :  =  acCcessl  I  ICist]  |  sCiosl  |  tlCcf]  | 
tcConD  |  tsCs3  |  wCwdms]  |  alClD 
<mode>  :=  aCll]  |  nonCe]  |  norCmalD  |  oCff3 
<nl>  :=  return  or  newline  key 

Arguments  enclosed  in  brackets  "C  ]"  are  optional. 

An  example  of  this  command  is: 
m  su  tc  a  <nl> 

This  command  would  set  the  screen  mode  for  tcon  to  all.  EMP  would  output: 
Screening  for  TCON  is  now  all 

If  the  EM  had  entered  an  incorrect  or  ambiguous  subsystem  name,  or  an 
incorrect  or  ambiguous  screen  mode,  EMP  would  issue  an  appropriate  mes¬ 
sage  and  reprompt. 

B.5.2.4  Long  Form  Modify  User  Screening.  This  subcommand  changes  all 
subsystem  screen  modes  for  a  single  user.  The  syntax  of  the  command  is: 
mCodifyJ  useCr]  <username>  <mode>  <nl> 

<username>  :=  a  valid  logged  on  WWMCCS  username  |  aClU 
<mode>  :=  aCll3  |  nonCe]  |  norCmal3  |  oCffD 
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<nl> 


:*  return  or  newline  key 


Arguments  enclosed  in  brackets  "C  3"  are  optional. 

An  example  of  this  command  is: 

modify  user  af3gwbrqlre  all  <nl> 

This  command  would  change  the  screen  mode  of  all  subsystems  for  user 
af3gwbrglre  to  all.  EMP  would  output: 

Current  screening  for  af3gwbrglre  is  all 
If  the  EM  had  entered  an  invalid  username  (not  defined  to  FSM  or  not 
currently  logged  on)  or  an  incorrect  or  ambiguous  screen  mode/  EMP  would 
output  an  appropriate  message  and  reprompt  for  the  information. 

B.5.2.5  Long  Form  Modify  User  Subsystem  Screening.  This  subcommand 
changes  individual  screen  modes  for  a  single  user.  The  syntax  of  the 
command  is: 

mCodify3  usu£bsystem3  <username>  <subname>  <mode>  <nl> 

<username>  :=  a  valid  logged  on  WWMCCS  username  |  aClU 
<subname>  :=  acCcess3  I  LCist3  |  sCios3  |  tlCcf}  I 
:*  tcConH  I  tsCs3  I  wCwdmsD  |  aClU 
<mode>  :=  aCll3  |  non£e3  I  norCmaU  |  oCff3 
<nl>  :=  return  or  newline  key 

Arguments  enclosed  in  brackets  "£  3"  are  optional. 


An  example  of  this  command  is: 

mod  usub  af8gwglmxyz  lis  non  <nl> 

This  command  would  change  af8gwglmxyz's  list  subsystem  screen  mode  to 
none.  EMP  would  output: 
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Current  screening  for  af8gwglmxyz  using  LIST  is  none 
Had  the  EM  entered  an  invalid  username  (not  defined  to  FSM  or  not 
currently  logged  on),  an  incorrect  or  ambiguous  subsystem  name,  or  an 
incorrect  or  ambiguous  screen  mode,  EMP  would  output  an  appropriate  mes¬ 
sage  and  reprompt. 

B.5.2.6  Long  Form  Modify  User  Bandwidth.  This  subcommand  changes  a 
bandwidth  threshold  value  for  a  single  user.  The  syntax  of  the  command 
is: 

mCodify]  ubCandwidth3  <username>  <rate>  <nl> 

<username>  :=  a  valid  logged  on  WWMCCS  username  I  aCllJ 
<rate>  :=  a  positive  integer  between  1  and  255  inclusive 
<nl>  :=  return  or  newline  key 

Arguments  enclosed  in  brackets  "C  ]"  are  optional. 

An  example  of  this  command  is: 
m  ub  af3gwbrgmes  2  <nl> 

This  command  would  change  the  bandwidth  threshold  for  the  user 
af3gwbrgmes  to  2.  EMP  would  output  in  response  to  this  command: 

Current  bandwidth  for  af3gwbrgmes  is  now  2 
If  the  EM  enters  an  invalid  username  (not  defined  to  FSM  or  not  currently 
logged  on),  or  an  incorrect  bandwidth  threshold  rate,  EMP  outputs  an 
appropriate  message  and  reprompts  for  the  information. 
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3. 5. 2. 7  Long  Form  Modify  User/Screener  Assignments.  This  subcommand 
changes  a  user's  Screener.  Ths  syntax  of  the  command  is: 

mCodify]  uaCssignments]  <username>  <Screenername>  <nl> 

<username>  :  =  a  valid  logged  on  WWMCCS  username 
<Screenername>  :  =  a  valid  logged  on  Screener 
<nl>  :=  return  or  newline  key 

Arguments  enclosed  in  brackets  "C  3"  are  optional. 

An  example  of  this  command  is: 

mod  uas  af3gwbrglre  mees  <nl> 

This  command  would  change  af3gwbrglre's  current  Screener  to  be  Mees.  EMP 
would  output  a  message  indicating  the  change: 

User  af3gwbrglre  is  now  assigned  to  Screener  Mees 
If  the  EM  enters  an  invalid  username  or  Screener  name  (not  defined  to  FSM 
or  not  currently  logged  on)  EMP  issues  an  appropriate  message  and 
reprompts. 

B.6  PROFILE 

The  PROFILE  command  displays  the  current  status  of  any  or  all  current  FSM 
low-side  users.  There  are  six  status  types: 

1.  waiting  on  user  input 


2. 


waiting  on  system  output 


3 


waiting  on  Screener  response 


4.  waiting  on  user  input/system  output 


3.  waiting  on  Screener  assignment 


6.  waiting  to  logon  (connect  to  WWMCCS). 


waiting  on  user  input  means  that  the  user's  FSMGP  is  waiting  for  the 
WWMCCS  user  to  ents.  ~  data  so  that  it  may  proceed.  Waiting  on  system  out¬ 
put  means  that  the  WWMCCS  user's  FSMGP  is  waiting  for  output  from  WWMCCS 
to  proceed,  waiting  for  Screener  response  means  that  the  user's  FSMGP  is 
waiting  for  a  decision  from  a  Screener  before  the  system  output  can  be 
sent  to  the  user.  Waiting  on  user  input/system  output  means  that  the 
user's  FSMGP  is  waiting  for  data  from  either  WWMCCS  or  the  user  in  order 
to  proceed  (e.g.,  LISTEN  mode  in  TLCF>.  Waiting  on  Screener  assignment 
means  that  the  user  is  waiting  to  be  assigned  a  Screener  before  he  may 
proceed.  Waiting  to  logon  means  that  the  user's  FSMGP  is  waiting  to  con¬ 
nect  to  the  WWMCCS  via  the  Remote  Network  Processor  Emulator  (RNPE) . 


The  command  syntax  is: 

pCrofi'.eJ  C<userlist>]  <nl> 

<userlist>  :=  <user>  |  <user>  <userlist> 

<user>  :=  <termid>  |  <username> 

<termid>  :=  last  character  of  valid  FSM  terminal 
<username>  :=  a  valid  logged  on  WWMCCS  username 
<nl>  :=  a  newline  or  return  key 

Arguments  enclosed  in  brackets  "t  D"  are  optional.  PROFILE  returns  to  the 
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command  prompt  ("*")  after  displaying  the  status  information. 

The  PROFILE  command  with  no  arguments  causes  profiles  for  all  currently 
logged  on  WWMCCS  users  to  be  displayed.  Each  logged  on  user  causes  one 
record  to  be  displayed  with  the  user  name,  terminal  ID,  current  subsystem 
status  and  DTG  (date-time  group)  of  the  status  to  be  displayed.  For  exam¬ 
ple: 

pro  af3gwbrgjdm  <nl> 
would  cause  EMP  to  output: 

CURRENT  FSM  USER  STATUS  Wed  Sep  17  14:53:46  1980 

User  Terminal  Subsystem  Waiting  On  DTG  of  Status 

af3gwbrgjdm  1  WWDMS  user  input  Sep  17  14:30:22  1980 

In  another  example,  if  the  EM  entered: 

p  af3gwbrgmes  5  af8gwglmlre  <nl> 

EMP  might  display: 


CURRENT  FSM 

USER  STATUS 

Wed  Sep  17  15:13:07 

1980 

User 

Terminal 

Subsystem 

Waiting  On 

DTG 

of 

Status 

af3gwbrgmes 

6 

TSS 

Screener  assignment 

Sep 

17 

15:12:03 

1980 

af8gwbrgjdm 

5 

TLCF 

system  output 

Sep  17 

15:12:43 

1980 

af8gwbrglre 

f 

TCON 

user  input 

Sep 

17 

15:05:40 

1980 

If  the  EM  enters  an  invalid  username  (not  defined  to  FSM  or  not  currently 
logged  on)  or  an  invalid  terminal  identifier  (not  currently  in  use)  EMP 
outputs  an  appropriate  message  and  prompts  for  the  information. 

8.7  QUIT 

The  QUIT  command  terminates  EMP  and  logs  the  user  off  the  system.  Its 
syntax  is: 

qCuit]  <nl> 

where  the  letters  in  brackets  "C  3"  are  optional,  and  <nl>  is  a  newline 
or  carriage  return. 
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SCREENER  TRUSTED  PROGRAM  (SCTP)  USER  INTERFACE  ; 

i 

The  decision  to  Let  users  view  system  output  Is  made  by  Screener  person¬ 
nel  via  the  Screener  Trusted  Program  (SCTP).  Since  SCTP  must  be  veri¬ 
fied/  Its  Interface  with  the  Screener  Is  minimal.  All  Inputs  are  single 
letter  responses  to  prompts/  and  SCTP  operates  In  raw  mode  (no  newline  or 
return  keystrokes  are  necessary).  Therefore,  no  syntax  Is  presented  in 
this  section.  Rather,  a  scenario  Is  presented  In  which  all  possible 
Screener  actions  are  covered. 

The  Screener  logs  on  to  FSM  In  the  normal  UNIX  fashion.  If  there  are  no 
downgrades  pending,  SCTP  clears  the  screen  and  outputs: 

*****************  no  Pending  Downgrade  Requests  ***************** 


Enter  l  to  logout  : 

This  message  remains  on  the  screen  until  a  downgrade  Is  requested  or  the 
Screener  types  "l".  When  a  downgrade  request  appears,  SCTP  clears  the 
terminal  screen  and  outputs: 


****************** 


DOWNGRADE  REQUESTED 


**  **************** 


Enter  <return>  to  proceed 


l  to  Logout  : 


This  prompt  is  followed  by  three  audible  alarms  (bells).  When  the 
Screener  is  ready  to  perform  the  downgrade  he  presses  the  terminal's 
"return"  key.  SCTP  then  outputs  the  first  page  of  downgrade  data  fol¬ 
lowed  by  the  prompt  (on  the  bottom  of  the  same  screen): 

"downgrade  data" 

*******************  Downgrade  File  ******************* 

Classification  is:  OFFICIAL  USE  ONLY 

Enter  r  for  REJECT  : 

<return>  to  continue  : 

\ 

I 

The  Screener  is  not  allowed  to  accept  a  downgrade  request  until  the 
entire  contents  of  the  downgrade  file  has  been  displayed;  the  Screener 
can  always  reject  a  downgrade  at  any  time  during  his  perusal  of  the  data. 

The  above  prompt  is  positioned  at  the  bottom  of  each  page  (except  the 
last  page)  of  downgrade  information.  Notice  that  the  classification  of 
the  user's  output  is  displayed  for  the  Screener.  This  information  is 
obtained  from  the  user's  response  to  the  "CLASSIFICATION  OF  YOUR  OUTPUT?" 
query  from  WWMCCS.  The  user  in  this  example  responded  "ufo".  The  fol¬ 
lowing  is  a  list  of  possible  classification  outputs  displayed  by  SCTP: 
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1.  if  the  user  enters  "uzz"  SCTP  displays  "UNCLASSIFIED" 

2.  if  the  user  enters  "ufo"  SCTP  displays  "OFFICIAL  USE  ONLY" 

5.  if  the  user  enters  "czz"  SCTP  displays  "CONFIDENTIAL" 

4.  if  the  user  enters  "szz"  SCTP  displays  "SECRET" 

5.  if  the  user  enters  "swp"  SCTP  displays  "SECRET  WORKING 
PAPERS" 

when  the  last  page  of  information  is  displayed  SCTP  outputs  the  following 
prompt : 

"downgrade  data" 

*******************  Downgrade  Fi le  ******************* 

Classification  is:  OFFICIAL  USE  ONLY 

Enter  r  for  REJECT 

a  for  ACCEPT 

<return>  to  continue  : 

SCTP  will  clear  its  Screener's  input  buffer  before  the  output  of  each 
prompt.  Thus,  the  Screener  must  wait  for  the  data  to  be  presented  before 
replying.  In  addition,  SCTP  will  not  accept  invalid  responses.  Should 
the  Screener  enter  one,  SCTP  outputs  "??"  and  waits  for  the  next  entry. 
This  is  true  for  all  prompts. 


For  alt  downgrade  requests,  the  Screener  Is  given  the  option  of  viewing 
an  additional  context  file.  This  file  contains  two  screens  of  informa¬ 
tion  just  preceding  the  downgrade  data.  This  file  contains  both  ordered 
user  input  and  system  output.  In  some  situations  this  additional  data 
may  aid  the  Screener  in  determining  whether  to  accept  or  reject  the  down¬ 
grade  request.  If  the  Screener  decides  to  view  the  context  file  (by 
depressing  the  "return"  key)  then  SCTP  outputs  the  first  page  of  data 
from  this  file  followed  by  the  prompt 

"context  information  data" 

******************  Information  File  ****************** 

Enter  r  for  REJECT 

a  for  ACCEPT 

<return>  to  continue  : 

SCTP  always  displays  downgrade  and  context  data  in  a  cyclic  manner.  That 
is,  if  the  Screener  always  depressed  the  "return"  key,  SCTP  would  first 
display  the  downgrade  data  (one  page  at  a  time),  and  then  the  context 
file  data  (if  present),  and  then  cycle  back  to  the  downgrade  data,  and  so 
on. 

If  the  Screener  decides  to  accept  a  downgrade  request  (after  having 
viewed  all  downgrade  data)  he  depresses  "a”.  SCTP  requires  that  the 
Screener  confirm  all  accept/reject  inputs  and  thus  outputs 


*******************  Confirm  Downgrade  ******************* 


Enter  y  for  CONFIRMATION 

n  for  no  : 

If  the  Screener  enters  "n"  (for  no  confirmation),  SCTP  outputs  the  next 
page  of  the  current  file  (downgrade  or  context  file),  followed  by  the 
appropriate  reject~accept-continue  prompt.  If  the  Screener  enters  "y” 
(confirming  the  downgrade  request),  SCTP  outputs 
Downgrade  Accepted 

and  proceeds  to  the  next  downgrade  request.  If  the  Screener  decides  to 
reject  the  downgrade  request  SCTP  asks  for  confirmation 

*******************  Confirm  Rejection  ******************* 

Enter  y  for  CONFIRMATION 

n  for  no  : 

If  the  Screener  confirms  the  rejection  SCTP  responds  with 

Downgrade  Rejected 

and  proceeds  to  the  next  downgrade  request. 

when  a  downgrade  request  comes  as  a  result  of  the  Environment 
Manager  changing  the  screen  mode  to  ALL,  SCTP  displays  this  fact 
in  the  downgrade  file  prompt: 


****************** 


Downgrade  File  (All/EM) 


******************* 


Classification  is:  SECRET 

Enter  r  for  REJECT 

a  for  ACCEPT 

<return>  to  continue 


If  the  screen  mode  had  changed  because  the  user  exceeded  his/her  current 
bandwidth  threshold,  SCTP  displays  this  in  the  downgrade  file  prompt: 

******************  Downgrade  File  (All/Band)  ******************* 
Classification  is:  SECRET  WORKING  PAPERS 


Enter  r  for  REJECT 

a  for  ACCEPT 

<return>  to  continue 
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AUDIT  TRAIL  DISPLAY  PROGRAM  (ATDP)  USER  INTERFACE 


The  Audit  Trail  Display  Program  (ATDP)  displays  FSM  audit  events  to  help 
analyze  FSM  activities.  The  program  is  invoked  by  the  Environment 
Manager  (EM)  via  the  "history"  command.  (See  Appendix  B  for  more  informa¬ 
tion  on  EM  commands). 

The  FSM  Audit  Trail  consists  of  a  "current”  file  and  saved  files  that 
were  previously  current.  When  a  current  file  is  saved  (by  using  the  END 
command)/  its  name  will  be  changed  from  'current'  to  the  date-time  group 
(DTG)  of  the  save.  In  this  way  the  size  of  the  current  file  may  be  limi¬ 
ted  to  a  manageable  amount.  In  addition/  if  the  EM  saved  the  current 
file  daily/  a  uniform  audit  data  base  could  be  maintained.  See  the  END 
command  for  more  details. 

ATDP  commands  include: 

1.  END  -  Save  the  current  audit  file  and  start  a  new  one. 

4.  FILES  -  List  all  of  the  existing  audit  files. 

3.  HELP  -  Display  a  list  of  commands  or  information  about  one 


or  more  specified  commands. 


4.  LIST  -  Display  audited  events  with  optional  specifiers  in 

ascending  time  order. 

5.  QUIT  -  Terminate  the  Audit  Trail  Display  Program. 

Additionally,  unrecognizable  input  causes  a  message  to  be  output  and  a 
return  to  the  command  level  prompt. 


when  ATOP  is  invoked  by  the  EM,  it  initially  displays  a  help  message 
informing  the  EM  of  the  available  commands.  Then  ATDP  signifies  that  it 
is  ready  to  accept  commands  by  printing  a  ">"  on  the  terminal.  This 
informs  the  user  that  any  of  the  commands  listed  above  can  be  entered. 
This  prompt  distinguishes  it  from  other  EM  commands,  which  prompt  with  an 
asterisk  (*).  The  following  sections  describe  each  ATDP  command  in 
detail. 

D.  1  END 

The  END  command  saves  the  current  audit  file. 


The  command  syntax  is: 
eCndl  <nl> 

<nl>  :=  newline  or  return  key 


The  END  command  terminates  the  current  audit  file  and  saves  it.  The 
current  file  will  be  renamed  with  the  DTG  of  the  save.  This  command 
allows  the  audit  files  to  be  kept  to  reasonable  sizes,  allowing  more 
efficient  processing  by  the  LIST  command.  To  illustrate  the  renaming 
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property  of  END/  assume  that  the  current  audit  file  is  ENDed  on  April  2 
at  12:05:30.  The  current  audit  file  would  be  renamed  to  "0402120530"  and 
the  "current"  file  length  would  be  reset  to  zero. 


The  command  syntax  is: 


:=  new l inn  or  return  key 


•osa 
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D.2  FILES 


The  FILES  command  lists  all  existing  audit  files. 


files  C<output-f lag>]  <nl> 

<output-f lag>  :=  -t  |  -l  |  -p 

-t  =  output  to  terminal  with  paging  (default) 


-l  =  output  to  terminal  with  no  paging 
-p  =  output  to  printer  with  no  paging 


m 

$ 

»y»i 


The  FILES  command  displays  in  order  all  past  audit  files  that  have  been 
saved  by  the  END  command.  It  displays  each  file's  name/  DTG  of  creation/ 
date  of  last  modification  and  size  in  512  character  blocks.  In  addition/ 
FILES  displays  the  above  information  on  the  "current"  file.  If  the  FILES 
command  were  entered  as: 
f  <nl> 


ATDP  would  output/  for  example: 


hV  » 


>  ^  ^ 


File  name 


Creation  date 


Last  modified  date 


Size  (blocks) 


0904115524 

Tue  Aug 

19 

15:15:53 

1980 

Thu  Sep 

4 

11:03:29 

1980 

2  SO 

0906101828 

Thu  Sep 

4 

11:55:26 

1980 

Sat  Sep 

6 

10:16:09 

1980 

52 

0908083713 

Sat  Sep 

6 

10:18:29 

1980 

Mon  Sep 

8 

05:43:59 

1980 

60 

0908114403 

Mon  Sep 

8 

08:37:14 

1980 

Mon  Sep 

8 

10:37:35 

1980 

19 

0908143618 

Mon  Sep 

8 

11:44:04 

1980 

Mon  Sep 

8 

14:34:10 

1980 

33 

0909084141 

Mon  Sep 

8 

14:36:19 

1980 

Tue  Sep 

9 

08:32:49 

1980 

1 

0909140811 

Tue  Sep 

9  08:42:04 

1980 

Tue  Sep 

9 

13:57:03 

1980 

68 

0910145636 

Tue  Sep 

9 

14:08:13 

1980 

Wed  Sep  10 

14:55:02 

1980 

71 

current 

Wed  Sep  10 

14:56:37 

1980 

Fri  Sep  19 

13:03:30 

1980 

22 

D.3  HELP 

The  HELP  command  displays  information  about  all  or  each  ATDP  command. 

The  command  syntax  is: 

help  C<output-f lag>3  C<command-name-list>]  <nl> 

<output-f lag>  :=  -t  (  -l  |  -p 

-t  *  output  to  terminal  with  paging  (default). 

-I  =  output  to  terminal  with  no  paging. 

~p  =  output  to  printer  with  no  paging. 

<cornmand-name-list>  :=  <command-name>  I  <command-name>  <command-name-list> 
<command-name>  :=  end  1  files  1  help  |  list  |  quit 

<nl>  :  =  newline  or  return  key 

Syntax  is  shown  in  a  modified  BNF  format.  Optional  arguments  are  shown  in 
brackets  "LI",  and  terminal  tokens  are  shown  between  the  characters  "<>". 
The  bar  character  "I”  separates  options. 


i 


\ 

* 

The  HELP  command  displays  general  information  on  all  commands  or  the  syn-  > 

tax  for  one  or  more  specific  commands.  If  the  EM  entered:  j 

i 

h  <nl> 

ATDP  would  display:  | 


This  is  a  brief  list  of  ATDP  commands.  To  get  further  information  on  a 
specific  command,  enter  "help  <command-name>"  where  the  valid  command 
names  are  "end,  files,  help,  list,  quit". 

END  -  Save  the  current  audit  file  and  start  a  new  one. 

FILES-  List  all  of  the  existing  audit  files. 

HELP  -  Display  this  list  of  commands  or  information  about  one  or  more 
specified  commands. 

LIST  -  Display  audited  events  with  optional  specifiers  in  ascending 
time  order. 

QUIT  -  Terminate  the  Audit  Trail  Display  Program. 


In  another  example,  if  the  EM  entered: 


help  files  <nl> 


ATDP  would  output: 


FILES  -  List  all  of  the  existing  audit  files. 

Syntax  is  shown  in  a  modified  BNF  format.  Optional  arguments  are  shown  in 
brackets  "C]",  and  terminal  tokens  are  shown  between  the  characters  "<>". 
The  bar  character  "|"  separates  options. 

Syntax: 

files  C<output-f lag>3  <nl> 

<output-f lag>  :*  -t  |  -l  |  -p 

-t  =  output  to  terminal  with  paging  (default). 

-I  *  output  to  terminal  with  no  paging. 

-p  =  output  to  printer  with  no  paging. 


<nl> 


:=  newline  or  return  key 


0.4  LIST 


The  LIST  command  prints  all  or  specified  FSM  audit  events. 

The  command  syntax  is: 

List  C<output-f lag>3  C<list-arg-list>D  <nl> 

<output-f Lag>  :=  -t  !  -I  |  -p 

-t  =  output  to  terminal  with  paging  (default). 

-I  =  output  to  terminal  with  no  paging. 

-p  =  output  to  printer  with  no  paging. 

<list-arg-list>  :=  <list-arg>  |  <list-arg>  <list-arg-list> 

<list-arg>  :=  <user-arg>  |  <system-arg>  |  <event-arg>  |  <time-arg> 

where  each  <list-arg>  can  only  appear  once. 

* 

<user-arg>  :=  user  C<user-name-list>3 

<user-name-list>  :=  <user-name>  |  <user-name>  <user-name-list> 

<user-name>  :=  valid  user  name  known  to  FSM  (manager,  screener,  WES  u: 

<system-arg>  :=  subsystem  C<subsys-name-list>] 

<subsys-name-list>:=  <subsys-namd>  |  <subsys-name>  <subsys-name-list> 
<subsys-name>  :=  tss  |  tlcf  |  wwdms  |  tcon  |  sios  I  access  |  list  |  log< 

<event-arg>  :=  event  C<event-type-list>D 

<event-type-list>  :=  <event-type>  |  <event-type>  <event-type-list> 
<event-type>  :*  1  |  2  |  3  |  4  |  5  |  6  |  7  |  8  |  9  |  10  |  11  |  12  | 

13  I  14  |  15  |  16  |  17  |  18  |  19 

1  =  valid  user  input  received 

2  =  invalid  user  input  received 

n  - 


3  =  system  output  sent  to  user 


4  =  system  output  not  sent  to  user 


5  =  system  output  accepted  by  screener 


6  =  system  output  rejected  by  screener 


7  =  screener  logged  onto  FSM 


8  *  screener  logged  off  of  FSM 


9  =  WES  user  logged  onto  FSM 


10  =  WES  user  logged  off  of  FSM 


11  *  user  Initiated  WWMCCS  subsystem 


12  =  user  assigned  to  screener 


13  *  user  input  simulated 


14  *  screen  mode  modified 


15  *  bandwidth  threshold  modified 


16  *  environment  manager  logged  onto  FSM 


17  a  environment  manager  logged  off  of  FSM 


18  a  system  output  received  from  WWMCCS 


19  =  system  output  received  by  screener 


<time-arg> 


:=  <start-time>  j  <end-time>  |  <start-time>  <end-time> 


<start-time> 


:=  start  |  <dtg> 


<end-time> 


:=  end  I  <dtg> 


where  a  <dtg>  by  itself  will  be  interpreted  as  a  <start-time>. 


<dtg> 


: *  MMDDhhmmCYY} 


MM  »  month  <01  -  12) 


DO  a  day  of  month  (01  -  31) 


hh  *  hour  of  day  <00  -  23) 


0-7 


r 

k 


i1 


i 


i? 


V 

is 


h 


I 


y 


|! 

El 


R 


K 


r 


Si 
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mm  =  minute  of  hour  (00  -  59) 

YY  *  year  minus  1900  <00  -  99) 

(default  time-range  is  current  day) 

<nl>  :=  newline  or  return  key 

Syntax  is  shown  in  a  modified  BNF  format.  Optional  arguments  are 
shown  In  brackets  “Cl",  and  terminal  tokens  are  shown  between 
the  characters  The  bar  character  "|"  separates  options. 

LIST  allows  the  user-oriented  display  of  accumulated  FSM  audit  events. 
Each  event  listed  contains  the  following  information: 

1)  time  of  the  event 

2)  event  description 

3)  event  data  items  such  as  user  name,  terminal  ID,  etc. 

When  no  arguments  are  entered  with  the  command,  LIST  produces  a  listing 
of  all  events  logged  for  the  current  day.  Events  of  particular  interest 
(such  as  WWMCCS  subsystem  usage  or  a  specific  user  history)  can  also  be 
selectively  listed  using  an  optional  list  argument.  See  below  for  sample 
LIST  input  and  output. 

The  following  arguments  are  known  to  LIST: 

EVENT  event-type(s)  All  audit  events  of  the  numeric  type(s) 

(see  a  detailed  description  of  FSM  audit 
events  for  the  event  codes  and  their 
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explanation).  For  instance,  all  "Valid 
user  input  received"  events  could  be 
listed  using  an  event-type  of  1 .  If 
EVENT  is  used  with  no  event-type,  the 
user  will  be  prompted  for  the  desired 
event-type (s) .  Input  can  consist  of 
multiple  types. 


a 


SUBSYSTEM  subsystem(s)  Audit  events  pertaining  to  the 

particular  WWMCCS  subsystem(s)  (i.e. 


TSS,  TLCF,  WWDMS,  TCON,  SIOS,  ACCESS, 


USER  user-name (s) 


LIST  and  LOGON)  are  listed. 


Audit  events  involving  the  particular 
user(s)  are  listed. 


The  output  of  LIST  may  be  further  restricted  to  events  within  a 
specified  time-range.  The  time-range  arguments  must  be  in  one  of 


the  following  forms: 


START 


All  events  from  the  start  of  the 
FSM  audit  trail  to  the  current 


1 


time. 


All  events  for  the  current  day. 


4 


START 


All  events  from  the  start  of  the 


FSM  audit  trail  to  the  current 


.vY 


0-9 


tine 


START  MMDDhhmmCYYl  ALL  events  from  the  start  of  the 

FSM  audit  traiL  to  the  specified 
month,  day,  hour,  minute  and  year. 

MMDDhhmmCYY3  MMDDhhmmCYY]  ALL  events  from  the  specified 

start-time  to  the  specified 
end-time. 

MMDDhhmmCYY3  END  ALL  events  from  the  specified  month, 

hour,  minute  and  year  to  the  current 
time. 

MMDDhhmmCYY]  ALL  events  from  the  specified  month, 

day,  hour,  minute  and  year  to  the 
current  time. 

If  arguments  are  combined,  LIST  output  can  become  very  specific.  The 
boolean  property  of  the  LIST  command  aLLows  the  EM  to  restrict  the  LIST 
output  to  precise  events.  For  example: 

list  event  11  user  af3gwbrgjdm  sub  sios  <nL> 
would  list  (for  the  current  day)  only  the  events  in  which  the  user 
af3gwbrgjdm  entered  the  WWMCCS  subsystem  (event  11)  SIOS.  That  is,  LIST 
would  search  for  audit  events  that  were  event  11  AND  user  af3gwbrgjdm  AND 
subsystem  SIOS.  Had  the  ATOP  user  entered: 

List  event  15  user  af3gwbrgjdm  af8gwbrgrmb  <nl> 


U1ST  would  search  for  audit  events  that  were  event  15  (bandwidth 
threshold  modified)  AND  user  af3gwbrgjdm  OR  event  15  AND  user 
af8gwbrgrab.  In  this  way  the  ATOP  user  can  display  each  event  in  which 
two  users  had  their  bandwidth  thresholds  modified  (if  any). 


Sample  LIST  input  follows: 


a)  list 


This  is  the  default  form  of  LIST;  i.e.  all  events  for  the  current  day 
(April  15)  are  displayed.  This  form  of  the  command  is  equivalent  to:  list 
-t  04150000  end 


b)  list  -p  event  01 


Send  all  "Valid  user  input  received"  (Event  01)  audit  events  for  the 
current  day  to  the  line  printer. 


c)  list  event  start  end 


Please  choose  one  or  more  of  the  following  event  types: 

1  -  Valid  user  input  received 

2  -  Invalid  user  input  received 

3  -  System  output  sent  to  user 

4  -  System  output  not  sent  to  user 

5  -  System  output  accepted  by  screener 

6  -  System  output  rejected  by  screener 

7  -  Screener  logged  onto  FSN 

8  -  Screener  logged  off  of  FSM 

9  -  WES  user  logged  onto  FSfl 

10  -  WES  user  logged  off  of  FSm 

11  -  User  initiated  WWMCCS  subsystem 


12  -  User  assigned  to  screener 

13  -  User  Input  simulated 

14  -  Screen  mode  modified 

15  -  Bandwidth  threshold  modified 

16  -  Environment  manager  logged  onto  FSM 

17  -  Environment  manager  logged  off  of  FSM 

18  -  System  output  received  from  WWMCCS 

19  -  System  output  received  by  screener 

Event  types?  7  8  9  10 

Display  on  the  terminal  (with  paging)  the  logging  events  Screener 
logon/logoff  and  User  logon/logoff  for  the  entire  time-range  the  audit 
files  cover.  Notice,  the  user  was  presented  with  a  menu  of  event-types  an 
prompted  for  the  events  desired  since  none  were  entered. 

d)  list  -l  sub  tlcf  04021200  04150830 

Display  on  the  terminal  (without  paging)  all  audit  events  concerned  with 
the  WWMCCS  Teleconferencing  (TLCF)  subsystem  between  April  2nd  at  noon 
until  April  15th  at  8:30  am. 

e)  list  user 

User  name(s)?  RAH  MEES  SCHELLER 

Display  on  the  terminal  (with  paging)  all  audit  events  concerned  with  the 
named  users  (RAH,  MEES,  SCHELLER)  for  the  current  day. 


f)  list  -p  start  end 


List  all  audit  events  on  the  printer.  Every  audited  event  would  be  prin¬ 
ted  out  using  this  command. 


Sample  LIST  output  for  each  audit  event  is  shown  in  Figure  0-1. 


wed  Sep  10  14:17:23  1980 

Event:  Valid  user  input  received  1 

User:  af8gwbrgjdm 

Terminal:  k 

Subsystem:  LOGON 

**********  TEXT  ********** 

001 

**********  end  of  text  ********** 

wed  Sep  10  15:17:19  1980 

Event:  Invalid  user  input  received  2 

User:  af8gwbrgjdffl 

Terminal:  k 

Subsystem:  TSS 

Reason:  No  match. 

**********  TEXT  ********** 

ZZZ 

***^r ******  end  of  text  ********** 

Wed  Sep  10  14:17:37  1980 

Event:  System  output  sent  to  user  3 

User:  af8gwbrgjdm 

Terminal:  k 

Subsystem:  TSS 

**********  TEXT  ********** 

CLASSIFICATION  OF  YOUR  OUTPUT? 

**********  end  of  text  ********** 

Fri  Sep  12  12:43:38  1980 

Event :  System  output  not  sent  to  user  4 

User:  af8gwbrgjdm 

Terminal:  1 

Subsystem:  TSS 

**********  TEXT  ********** 

CP  DISCONNECT 

**********  END  OF  TEXT  ********** 

Wed  Sep  10  14:21 :18  1980 

Event:  System  output  accepted  by  screener  5 

User:  af8gwbrgjdm 

Terminal:  k 
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Subsystem:  TSS 
Screener:  screener 

**********  TEXT  ********** 

DATE 

**********  END  OF  TEXT  ********** 

Fri  Sep  19  11:46:13  1980 

Event:  System  output  rejected  by  screener  6 

User:  af3gwbrgrah 

Terminal:  k 

Subsystem:  LIST 

Screener:  harvey 

**********  TEXT  ********** 

ready 

**********  ENO  OF  TEXT  ********** 

Wed  Sep  10  14:18:22  1980 

Event:  Screener  logged  onto  FSM  7 

User:  screener 

Terminal:  7 

Wed  Sep  17  15:38:26  1980 

Event:  Screener  logged  off  of  FSM  8 

User:  harvey 

Terminal:  k 

Wed  Sep  10  14:17:34  1980 

Event:  WES  user  logged  onto  FSM  9 

User:  af8gwbrgjdm 

Terminal:  k 

wed  Sep  10  08:16:33  1980 

Event:  WES  user  logged  off  of  FSM  10 

User:  af8gMbrgjdm 

Terminal:  l 

Wed  Sep  10  14:17:36  1980 

Event:  User  initiated  WWMCCS  subsystem  11 

User:  af8gwbrgjdm 

Terminal:  k 

Subsystem:  TSS 

wed  Sep  10  14:18:26  1980 

Event:  User  assigned  to  screener  12 

user:  af8gwbrgjdm 

Terminal:  k 

Screener:  screener 

Terminal:  7 


Wed  Sep  10  14:17:45  1980 

Event:  User  input  simulated 

User:  af8ywbrgjdm 

Terminal:  k 

Subsystem:  TSS 

**********  TEXT  ********** 

zzz 

**********  end  OF  TEXT  ********** 

Fri  Sep  19  12:31:10  1980 

Event:  Screen  mode  modified 

User:  af3gwbrgrah 

Subsystem:  ALL 

Screen  mode:  No  screening 

Fri  Sep  19  12:25:10  1980 

Event:  Bandwidth  threshold  modified 

User:  ALL 

Bandwidth  threshold:  1 

wed  Sep  10  14:22:03  1980 

Event:  Environment  manager  logged  onto  FSM 

User:  manager 

Terminal:  1 

Fri  Sep  19  13:03:05  1980 

Event:  Environment  manager  logged  off  of  FSM 

User:  manager 

Terminal:  l 

wed  Sep  10  14:17:29  1980 

Event:  System  output  received  from  WWMCCS 

user:  af8gwbrgjdm 

Terminal:  k 

Subsystem:  LOGON 

**********  TEXT  ********** 

TERMINAL 

**********  end  of  text  ********** 

wed  Sep  10  14:19:22  1980 

Event:  System  output  received  by  screener 

User:  af8gwbrgjdm 

Subsystem:  TSS 

Screener:  screener 

Terminal:  7 


Figure  D^l .  Sample  LIST  output 


Notice  several  features  of  Figure  D-1 .  First,  each  event  has  an  English 
description  of  the  event  as  welt  as  the  event  number.  Second,  each  event 
has  the  DTG  of  its  recording.  Finally,  where  applicable,  the  audit  texts 
are  included. 

It  is  also  possible  to  restrict  the  ATOP  output  by  requesting  a  combina¬ 
tion  of  arguments.  For  example,  if  a  user  wanted  certain  events  for  a 
given  user  he  might  input: 

l  user  af3gwbrgjdm  event  10  <nl> 

which  would  display  all  events  for  the  current  day  of  type  10  for  user 
af3gwbrgjdm.  ATOP  might  output: 

List  events  between  Tue  Sep  23  08:00:00  1980  and  Tue  Sep  23  15:19:57  1980 
Concerning  users:  af3gwbrgjdm 
Concerning  events:  10 


Tue  Sep  23  08:16:33  1980 

Event:  WES  user  logged  off  of  FSM  10 

User:  af3gwbrgjdm 

Terminal:  l 

Notice  that  ATOP  uses  a  Boolean  algorithm  to  obtain  the  user's  request. 
That  is,  ATOP  searches  the  audit  files  for  events  that  involve  user 
'af8gwbrgjdm*  AND  are  of  type  10. 

In  another  example,  a  user  might  want  to  restrict  the  event  selection 


further: 


I  user  af8gubrgjdm  event  3  sub  sios  <nl> 


ATOP  might  output: 


List  events  between  Tue  Sep  23  08:00:00  1980  and  Tue  Sep  23  15:38:28  1980 
Concerning  users:  af8gwbrgjdm 
Concerning  subsystems:  sios 
Concerning  events:  3 


Tue  Sep  23  14:21:36  1980 


Event: 

User: 

Terminal: 

Subsystem: 

********** 

SIOS  ROUTINE 
********** 


System  output 

af8gwbrgjdm 

k 

SIOS 

TEXT 

END  OF  TEXT 


sent  to  user 


********** 

********** 


3 


Finally,  ATOP  outputs  an  appropriate  message  when  it  cannot  find  the 
requested  events.  For  example,  if  no  events  had  been  generated  fcr  Sep¬ 
tember  23,  and  the  EM  entered: 
l  <nl> 

ATOP  would  output: 


List  events  between  Tue  Sep  23  00:00:00  1980  and  Tue  Sep  23  15:47:31  1980 
with  no  specific  search  categories  specified. 

No  audit  records  were  found  which  satisfied  the  requirements. 


0.5  QUIT 


The  QUIT  command  terminates  ATOP  processing 


The  command  syntax  is: 
qCuit]  <nl> 

<nl>  :=  newline  or  return  key 

QUIT  terminates  ATOP  and  returns  control  to  the  Environment  Manager  Pro¬ 
cess. 
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APPENDIX  E 


GLOBAL  LOGON  FILE  MODIFIER  (USER)  USER  INTERFACE 


The  USER  utility  program  adds  and  deletes  users  from  the  FSM  environment. 

with  it,  WWMCCS  users,  Screeners  and  Environment  Managers  can  be  added 

and  deleted,  and  a  current  list  of  users  (all  those  listed  above)  can  be 

displayed.  The  USER  program  is  executed  by  issuing  the  command  "user 

<nl>"  at  the  command  prompt.  USER  responds  with  the  prompt: 

Please  choose  the  next  action  to  be  performed: 

Type  a  to  add  a  new  WWMCCS  user 

Type  s  to  add  a  new  Screener 

Type  e  to  add  a  new  Envi ronment  Manager 

Type  d  to  delete  a  WWMCCS  user 

Type  t  to  delete  a  Screener  or  Environment  Manager 

Type  l  to  list  currently  defined  users 
'Type  q  to  quit  the  UPDATE  program 

Opt i on? 

If  the  user  wants  to  add  a  WWMCCS  user,  he/she  enters  "a"  at  the  Option? 
prompt.  USER  then  outputs: 

Add  a  WWMCCS  user 

Please  enter  a  user  name  with  exactly  11  characters  with  the  format: 
afC389}  CgxJ  Cmw]  Csite  code  (3  chars)}  Cuser  initials  (3  chars)}: 

If  the  user  enters  "af3gwbrgrmb",  USER  responds  with: 

user  af3gwbrgrmb  is  now  a  valid  user  name 
USER  then  redisplays  the  command  options  and  the  prompt.  If  the  user  had 
entered  a  WWMCCS  user  name  in  the  wrong  format,  USER  outputs: 

Invalid  user  name,  must  follow  the  following  format: 


af C389D  Cgxl  Z muJ  [site  code  (3  chars)}  Cuser  initials  (3  chars)] 
and  then  redisplays  the  command  options  prompt.  If  the  user  had  entered 
too  many  characters,  USER  responds  with: 

Invalid  user  name,  too  many  characters 
and  then  redisplays  the  command  options  prompt.  If  the  user  attempted  to 
add  an  existing  WWMCCS  user  (already  defined  to  FSM) ,  'af3gwbrgjdm'  for 
example,  USER  outputs: 

user  af3gwbrgjdm  is  already  a  valid  user  name 
If  the  WWMCCS  user  had  previously  been  deleted  (undefined  to  FSM),  USER 
outputs: 

User  af3gwbrgrmb  is  a  previously  used  user  name. 

Do  you  wish  this  name  to  be  reinstated? 

A  'y'  to  this  question  results  in: 

User  af3gwbrgrmb  is  now  a  valid  user  name 

Any  other  response  results  in  a  redisplay  of  the  command  options  prompt. 

If  the  user  wants  to  add  a  Screener,  he/she  would  respond  to  the  Option? 
prompt  with  's'.  USER  would  respond  with: 

Add  a  Screener 

Please  enter  a  user  name  not  exceeding  8  characters. 

Had  the  user  entered  'mees',  for  example,  USER  would  respond  with: 

User  mees  is  row  a  valid  user  name 

Had  the  user  entered  a  name  already  defined  to  FSM,  or  a  name  with  too 
many  characters,  USER  would  output  an  appropriate  message  and  redisplay 
the  command  options  prompt. 


If  the  user  wanted  to  add  an  Environment  Manager  to  FSM,  he/she  would 
enter  "e"  at  the  Option?  prompt.  This  would  result  in: 


Add  an  Envi ronment  Manager 

Please  enter  a  user  name  not  exceeding  8  characters: 

Had  the  user  entered  'smyth',  for  example,  USER  would  output: 
user  smyth  is  now  a  valid  user  name 

However,  only  one  Environment  Manager  may  be  defined  to  FSM  at  any  one 
time.  If  there  had  already  been  an  EM  when  the  user  tried  to  add  one, 
USER  would  output: 

Only  one  manager  may  be  defined  at  a  time,  'smyth1  already  exists 

Deleting  (undefining  users  to  FSM)  is  as  easy  as  adding  them.  To  delete 
a  WWMCCS  user  the  user  enters  'd';  to  delete  a  Screener  or  Environment 
Manager  the  user  enters  't'.  This  results  in: 

Delete  a  WWMCCS  user 

Please  enter  a  user  name  with  exactly  11  characters  with  the  format: 
af  C389]  Cgx]  Cmw]  Csite  code  (3  chars)]  Cuser  initials  (3  chars)]: 
for  WWMCCS  users  and 

Delete  a  Screener  or  Environment  Manager 

Please  enter  a  user  name  not  exceeding  8  characters: 

for  Screeners  and  EMs.  Entering  the  correct  names  (they  must  exist  to 

FSM),  results  in  USER  confirming  the  deletion.  Entry  errors  (invalid 

format  or  trying  to  delete  non-existent  users)  cause  USER  to  issue  an 

error  and  redisplay  the  command  options  prompt. 

The  user  can  also  display  the  currently  existing  FSM  users.  This  is  done 
by  entering  'l'  at  the  Option?  prompt.  USER  might  display,  for  example: 
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USER 

USER  NAME 

USER 

VALID 

LOGGED 

TTY  ID 

ASSIGNED 

10 

TYPE 

USER? 

ON 

SCREENER 

1 

smyth 

Env  Mngr 

Yes 

No 

2 

mees 

Screener 

Yes 

Yes 

1 

3 

af3gmbrglre 

WES  User 

Yes 

Yes 

z 

mees 

4 

af8xwbrgabc 

WES  User 

Yes 

No 

5 

af8gwbrgjzm 

WES  User 

Yes 

No 

6 

af9xwglmrmb 

WES  User 

Yes 

Yes 

S 

jones 

7 

af3gwbrgrah 

WES  User 

Yes 

No 

8 

jones 

Screener 

Yes 

Yes 

6 

9 

af8gwbrgjdm 

WES  User 

Yes 

Yes 

7 

mees 

10 

af3gwbrgrmb 

WES  User 

No 

Finally/  to  terminate 

the  USER 

program/ 

the  user 

enters 

"q"  at  the 

option?  prompt.  USER  responds  with: 

UPDATE  program  terminated 
Good-bye 


j 
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APPENDIX  F 


FSMGTTY  PROGRAM  DESCRIPTION 


FSMGTTY  is  a  small  program  that  sets  up  the  WES  user/Guard  environment 
when  the  WES  user  initiates  a  terminal  session.  During  FSM  startup, 
FSMGTTY  is  executed  and  attempts  to  open  each  terminal  that  is  connected 
to  Guard  (via  the  POP  11/70).  After  setting  terminal  attributes  to 
resemble  normal  WWMCCS  terminals,  FSMGTTY  waits  until  the  WES  user  enters 
data  at  the  terminal  keyboard.  Once  this  occurs,  FSMGTTY  fork/executes  a 
copy  of  itself  which  obtains  current  copies  of  the  context  tables  and 
fork/executes  the  Guardian  Process  (FSMGP).  In  this  way,  little  machine 
overhead  is  consumed  while  a  terminal  is  not  being  used,  due  to  FSMGTTY 's 
small  size. 

FSMGTTY,  when  executed,  changes  the  UNIX  terminal  attributes  to  resemble 
WWMCCS  terminals.  These  changes  involve  changing  the  character  delete 
and  line  erase  characters,  as  well  as  mapping  keyboard  carriage  returns 
into  strict  carriage  returns  (sans  line  feed).  It  also  arranges  to 
ignore  potentially  troublesome  input,  such  as  control-S,  delete  and  other 
characters  that  have  a  special  meaning  to  the  UNIX  operating  system. 

When  a  WES  initiates  a  terminal  session  (by  typing  a  carriage  return  or 
control-A  from  a  tty  terminal  or  "$*$log24"  from  a  vip  terminal),  FSMGTTY 
locks  the  context  files,  preventing  any  changes  from  being  made,  and 


makes  copies  of  them  for  this  user.  This  facilitates  context  table 
changes  during  normal  FSM  operation  and  assures  that  each  WES  user 
obtains  the  most  current  version  of  the  context  tables,  when  the  copies 
have  been  made,  the  lock  is  removed  and  the  Guardian  Process  is 
fork/executed.  Following  WES  user  logoff  (either  normally/  or  following 
a  system  error)/  FSMGP  terminates  and  control  returns  to  FSMGTTY.  It 
will  start  the  entire  sequence  again,  beginning  with  changing  the  ter¬ 
minal  attributes. 


An  external  file  (/fsm/gttys)  contains  terminal  identifiers  and  all  asso¬ 
ciated  information  that  FSMGTTY  needs.  A  copy  of  this  file  follows: 


:  FSM  active  terminals  for  low-side  WES  users.  Format  is: 
:  one  character  terminal  type,  'v*  =  vip,  't'  =  tty/wang. 

:  Colon  to  separate  fields, 

:  one  character  to  be  used  for  logging  for  this  terminal. 

:  Colon  to  separate  fields, 

:  UNIX  pathname  for  terminal,  E.g.  /dev/tty8. 

:  Colon  to  separate  fields, 

:  UNIX  pathname  for  RNPE  line,  E.g.  /dev/rnpe/300/8 
• 

t:e:/dev/ttye:/dev/rnpe/300/e 
t:f :/dev/ttyf :/dev/rnpe/300/f 
t:g:/dev/ttyg:/dev/rnpe/300/g 
t :h : /dev/ ttyh : /dev/rnpe/300/h 


